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BORLAND PUSHES OPTIMIZEIT 
TO JAVA ENTERPRISE SERVERS 

Also licenses Microsoft's .NET Framework 
SDK for inclusion in Delphi, C++ Builder 



BY ALAN ZEICHICK 

Borland Software Corp. has 
released a new version of its 
Optimizeit performance-testing 
tool, traditionally for J2SE 
desktop applications but now 
for Java server apps as well. The 



company also has licensed 
Microsoft's .NET Framework 
SDK, and will be bundling it 
with its .NET-compatible lan- 
guage tools. 

According to Bill Pataky, 

► continued on page 14 
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Optimizeit ServerTrace gives a view of system entry points and Java services. 



Sun Jumps 
On Modeling 
Bandwagon 

Will bundle Embarcadero's Describe 
UML tool with Sun ONE Studio 



BY DAVID RUBINSTEIN 

First, Borland Software Corp. 
announced in November it was 
acquiring UML modeling capa- 
bility for its development tools 
with the US$185 million pur- 
chase of TogetherSoft Corp. 
Then, in December, IBM Corp. 
made a US$2.1 billion bid for 
Rational Software Corp., to add 
modeling and other capabilities 
to its development environment. 

Now, Sun M icrosystems Inc. 
has announced it has completed 
a deal with Embarcadero Tech- 
nologies Inc. to include Em- 
barcadero's Describe version 6.0 
modeling tool with 
the Sun ONE Studio 
version 4 develop- 
ment environment. 

Sun ONE group 
marketing manager 
Jeff Anders denied 
the bundling is a 
reaction to the Bor- 
land and IBM moves, 
saying, "That percep- 
tion would be incor- 
rect. Our discussions 




The bundling validates 
modeling, says Embar- 
cadero's Keller. 



with Embarcadero have been 
going on for some time." The 
first word of a partnership 
between the companies was 
issued in June 2001. 

The timing of the IBM , Bor- 
land and Sun announcements 
is coincidental, Anders said, 
and "not indicative of the 
work that's been done." Anders 
acknowledged that from a pure- 
ly financial standpoint, it could 
appear that IBM and Borland 
are making a larger investment 
in UML technology than 
Sun is, which is merely packag- 
ing Describe with Sun ONE 
Studio and is not as 
of now licensing the 
tool. "The percep- 
tion will be what the 
perception will be," 
Anders said. "Our cus- 
tomers told us they 
want a good modeling 
tool bundled with 
the IDE. That's what 
we're providing." 
Greg Keller, direc- 

► continued on page 14 



JCP Embraces WS-I for J2EE 1.4 

Adoption will delay forthcoming release until midyear 



BY ALAN ZEICHICK 

The Java Community Process, 
Sun M icrosystems Inc. 's govern- 
ing body for its Java specifica- 
tions, has decided to adopt the 
Web Services Interoperability 
Organization's interpretation of 
key Web services standards. 

This decision by the J2EE 
Expert Group will require 
reworking portions of the J 2EE 
1.4 specifications, reference 
implementation and compati- 
bility suite, according to Ralph 



Galantine, Sun's group market- 
ing manager for Java Web ser- 
vices. This pushes the final 
release of J 2EE 1.4, previously 
predicted for M arch, back sev- 
eral months, jeopardizing its 
debut at JavaOne, Sun's devel- 
oper conference scheduled for 
June 10-13 in San Francisco. 

"We're going to bring sup- 
port for the WS-I Basic Profile 
intoJ2EE 1.4," said Galantine. 
The Basic Profile, released in 
October 2002, is described by 
the WS-I (www.ws-i.org) as a 
set of nonproprietary Web ser- 
vices specifications, along with 
clarifications to those specifi- 
cations that promote interop- 
erability. 

Those changes will affect 
several Java specifications that 
fall under Java Service Request 



109, the umbrella specification 
for Java-based Web services, 
but would have the most severe 
impact on JAX-RPC, the Java 
API for XML -based Remote 
Procedure Calls. The changes 
"are somewhere between trivial 
and a major rewrite," he said. 

"It's significant work in the 
SOAP specification," Galantine 
explained. "The Basic Profile 
takes a SOAP 1.1+ approach, 
specifying areas in the SOAP 
specs that were incomplete, 
vague or open to interpretation. 
[WS-I] picked certain interpre- 
tations, and in some cases our 
Expert Group had made differ- 
ent interpretations. We're now 
going back to make the same 
choices as the WS-I, so devel- 
opers can get interoperability 
directly from J 2EE 1.4." I 



XML SPY 
TARGETS 
ORACLE,. NET 

BY ALAN ZEICHICK 

XML Spy, Altova Inc.'s editor 
for XM L documents, has new 
.NET and Oracle capabilities, as 
well as features for generating 
WSDL and PDF documents. 

Version 5 Release 3 of XM L 
Spy, which shipped at the end of 
January, now can work with 
M icrosoft'sC#language, accord- 
ing to the company. This 
allows developers to model an 
XM L schema using XM L Spy, 
and then export the C# classes 
for binding that schema to 
.N E T. T hose classes work with 
System.XM L, M icrosoft's API 
for programmatically access- 
ing XM L documents. 

► continued on page 12 



o choices; 




& §5l v .' Perforce 

■ m""- I 



nder pressure to manage source code and do more In less time, 
Configuration Management System is the must-have tool 



Hwfnrca's Sorrware CanJlguraMC<fl Manj-gerneni 
!ivm-m li tht-chotc* or devnloaera bMiuH no 
aihw tool can match the ac-oed. (janrnol and 
reUab-Jrfy Qui ri bring! ii> Hit- flMugmmiJ Ql tour 

fOUHte-COd* 

Maintain ynur top ifK+d no matter how many 
users f 111m. A! d>«caiu ol f'Lrfarco lln mditlcndl 
rtj.l-i»m rtitti wrall<knfed tables ia a imp* 
doutmIkji ct con bu acEarnptlatMEl in rmur-jma t *ne. 
Luijjf uysiulnJiu hl^Jti Ifltmlllrvj a Hj'-Hdwj and 
be j'FC'hiifl I aid unrtiljml -ntc-heyfxldeu acuai, 
qiiwui Perimce tha icaUlHlllv Inut i*q 
prajeci* require. 



Instil It tool, (win tt 'Bit, DKecirtc- operation* rajt 

Wilh ether SCM nvirlcrna, dnvc-'-jp-cr: Iuli: ji 

up alcaunt choice: do n the r-nhl wey Dr do I: tnu 

■■-■'■■. V ■:•(■■ i :+; :■■: trad n,"'.i.i Hty rii'ii i r ■ 

fan nvaf la ulivirtirw right rtjy 

Sea Jiurt Parfariu cunipuru* ut 

ItI cuj'<'wwHi .u*rfu r Lti . ran l perfa res' rm I ew» . M n 1 1 



Work atiywheie. Pciloice -a elfcJmt ovm 
rHfih blurcy neiwnrts sutn its WANl IIxi Internet 
and even Icw'Speetl didl up Gonnaaiani. Reouiiing 
D4k'y fCP.lR Piiffaice inula* uir a4 a vrail tuned 
■traemiruj maueg« protocol tu>" lyncltrDmiJrvy 
client workifiuLfl wuhiAivei lupus-lDri' canuKil.iL 



£>ev«fap arwl TJimmn rnulapJt lodeiinei . 
Perforce Inlct^u Brarchirsg"* - Ids \c-.i rroropniTW 
tcarurcs and apply 1ikcs between :odohroi 
jTuiM riMrtadeti lieapt Iredi gl vour evolving 
ptcjatik even while thwrt lOBvetap in pomllul. 

Support* all davelopnittie platform*. 
Perforce rurra ail mere llviii W ope* ming ayilurm, 
including dJJ flavors dI Window* 1 ,. UniX", l*nuf, 
Mac 05 XjudniDii! 

bilagrate witJi tending- rtlti and dalect tracks*. 
Including ViaunllMuiinj.NET, VlsuilC*^. 
Vdual fljalc , JfiuiHfci . CaddWa^iDiV TemniretA'. 
fijoxilld ' . C*v iL/ljIChiyiei ', DtnTreu. (jdckBgc* 
end mom 



FORCE 

1 F T H" A A E 
FdST S&ftwdre Configuration Managerften! www.perfOvce.cafn 



Download yojf free 2-user, non-expiring, full-featured copy now from www.perfofce.com. 
Free (and friendly) technical Support is On hand to answer ally and all evaluation questions. 



www.sdtimes.com 



Software Development Times . February 15, 2003 



NEWS 



Rogue Wave Turns Over New 'LEIF' on Integration 

Bobcat C++ servlet container becomes foundation for its EAI framework 



BY EDWARD J. CORREIA 

Leveraging its previous work in 
EAI consulting and its Bobcat 
C++ servlet container intro- 
duced last fall, Rogue Wave 
Software Inc. in late January 
released the Lightweight En- 
terprise Integration Frame- 
work, a tool that it says permits 
developers to easily integrate 
existing or new C ++ client and 
server applications with .NET 
and J2EE applications and 
Web services. As part of this 
product introduction, Rogue 
Wave will no longer sell Bobcat 
separately, and is offering cur- 
rent Bobcat customers a free 
upgrade to LEIF. 

According to Tim Triem- 
stra, LEIF product manager, 
the most typical usage sce- 
nario would involve an existing 
C++ application that needs to 
integrate with a new .NET 
client or J2EE server app. 
"The easiest way to integrate 
those is to have them talking 
Web services," he said. "They 
would give their WSD L file to 
LEIF, which would generate 
C++ classes that encompass 
the entire process of commu- 
nicating by way of Web ser- 
vices." Those classes are then 
converted into a client or serv- 
er application, he said, using 
the developer's own makefile 
utility, with all functionality 
present in the WSDL file 
recreated in C++. 

Triemstra said the thrust of 
Rogue Wave's (www.roguewave 
.com) business has been to 
simplify programming by dis- 
tancing developers from hard- 
ware-specific problems. "[Our] 
products abstract away compli- 
cated tasks such as networking 
and threading. What we've 
done with LEIF is to take Web 
services, something people need, 
and used our existing tech- 
nologies to create an abstrac- 
tion. Its primary focus is to 
make it easy to bind XM L and 
Web services on both client and 
server to existing C++ applica- 
tions or new ones. It's for any- 
one who's doing active C++ 
development that can benefit 
from integration with the rest 
of the enterprise." 

LEIF builds on Bobcat, 
Rogue Wave's C++ servlet 
engine, which Triemstra com- 
pares functionally to the 
Apache Project's Tomcat Java 



Servlet engine. "It can directly [apps] to automatically multi- ing Web server or stand alone available now for Linux, Unix 

[execute] C++ programs and thread and keep track of ses- using the Apache Web server, and Windows, starts at US$995 

has the ability to dynamically sion state." He added that which is included. per developer seat plus $1,995 

load and shut down server LEIF can run within an exist- Pricing for LEIF, which is per server processor. I 
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BE A Previews 'XMLBeans' 



Web-based service translates document schemas to Java classes 



BY ALAN ZEICHICK 

Claiming that the XM L Schema 
specification is often too com- 
plex for developers to work with, 



BE A Systems Inc. is demonstrat- 
ing XMLBeans, a Web-based 
service that automatically gener- 
ates Java classes for interpreting 



complex documents. The ser- 
vice, available now, can be used 
to experiment with the new 
concept, but cannot yet be used 



for commercial deployments. 

According to Carl Sjogreen, 
senior product manager for 
BEA WebLogic Workshop, the 
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challenge is providing access to 
structured XML data without 
losing its structure. "We hear 
from customers that XM L is 
everywhere, but the current 
solutions for writing applica- 
tions on top of XM L don't fit 
their needs," he claimed. "At 
one level, you have APIs, like 
SAX and DOM, that give you 
full access to the XM L but are 
tedious to write code with. At 
the other level, there are tech- 
nologies that force-fit XML 
into Java classes, but you lose a 
lot of the rich information in 
the XML, particularly around 
schema constraints." 

That means, he said, that 
programmers have to write 
code that duplicates the valida- 
tion logic and business rules 
that are already defined by the 
XML Schema. That code is brit- 
tle, he said, since it can't dynam- 
ically accommodate changes in 
the schema. 

"XM L Beans are meant to be 
the best of both worlds," Sjo- 
green continued. "It allows you 
to keep the XM L in its original 
form, and access it using conve- 
nient APIs. We support XQuery, 
so you can access the XM L. But 
we automatically build a set of 
Java classes for views of that 
data, so you get the convenience 
of Java classes." 

Those classes come from a 
free hosted service, at http: 
//workshop. bea.com/xml beans, 
that accepts an XM L Schema 
specification and returns a Java 
JAR file containing the new 
classes. "It's a technology pre- 
view," said Sjogreen, who added 
that the JAR files are pure Java 
and are compatible with com- 
peting J 2EE app servers such as 
IBM 's WebSphere or Sun's Sun 
ONE, as well as I D E s like Bor- 
land'sj Builder. 

F or now, the J ava classes gen- 
erated can't be used for deploy- 
ment, said Sjogreen. "[XML- 
Beans] is currently in beta form, 
so it's a development-only evalu- 
ation license." Sjogreen said that 
XM LBeanswill be bundled with 
future versions of BEA's Web- 
Logic platform, but he wouldn't 
address licensing fees for deploy- 
ing XMLBeans using non-BEA 
app servers. "We'll offer some 
sort of community license, but 
that's still to be worked out," he 
promised. 

"We're committed to making 
[XMLBeans] a standard, in the 
way that makes the most sense," 
he concluded, but couldn't spec- 
ify a time frame or standards 
organization with which BEA 
would work. I 
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COMPANIES 



Windows embedded tools vendor BSquare Inc. is offering a "jump 
start" service for helping customers build on Microsoft Corp.'s Win- 
dows XP Embedded . . . Sleepycat Software Inc. now is offering two 
free months of support for developers evaluating its open-source 
Berkeley DB embedded database software . . . Silicon Graphics Inc. 
has expanded its developer program to include Linux, as well as SGI's 
proprietary Unix version, IRIX. 



PRODUCTS 



Version 3.5 of Source Dynamics Inc.'s Source Insight code analyzer 
now supports C# and other Windows-managed code that uses the 
.NET Framework. It also offers increased data security, new tools for 
roaming developers and more document options. The code analyzer, 
priced at US$249, also works with C/C++ and Java code . . . Kenamea 
Inc. has updated its Kenamea Web Messaging Platform to give 
servers or user devices event-driven access to SOAP-DOC or SOAP- 
RPC-based Web services. Version 2.1 also includes new APIs for COM 
and .NET applications, new monitoring and admin features and an 
enterprise service bus . . . XAware Inc., which sells XML data- 
exchange software, has released a set of software components that 
allow for financial-services applications to communicate using 
RIXML, the Research Information Exchange Markup Language 
. . . Imaging Source Europe GmbH has released a .NET Windows 
j Forms version of its TX Text Control royalty- 

free word-processing component. The compo- 
nent remains available as an Active X component and C++ class 
library . . . Dart Communications Inc. has released a version of its 
PowerTCP Telnet component for .NET. The US$349 component, 
which does not have deployment royalties, allows .NET desktop and 
server applications to use the telnet, rsh, rexec and rlogic communi- 
cations protocols . . . ComponentOne LLC has shipped WebReports 
for ASP.NET, a Web Forms reporting package for .NET applications. 
The component is priced at US$399.95, and also is included in the 
$649.95 ComponentOne Studio for ASP.NET suite . . . Microsoft 
Corp. is running a public beta of its Visual FoxPro 8.0 database, 
which is scheduled to be generally available in March. The new 
release offers structured error handling, new base classes and con- 
trols, improved compatibility with VS.NET and SQL Server 2000, and 
access via Web services. The company also has released version 9.0 
of its DirectX SDK, which allows developers to write code that 
exploits multimedia hardware capabilities. New with version 9.0 is 
HLSL, a new high-level shading language based on C. The SDK can be 
downloaded from www.microsoft.com/directx. Microsoft also has 
released SQL Server 2000 Service Pack 3, which focuses on secu- 
rity enhancements . . . Eiffel Software Inc. has updated its 
EiffelStudio IDE and compiler for Unix. Version 5.2 
includes a redesigned GUI builder, upgrades to the debug- 
ger and the ability to call external tools from within Eiffel- 
Studio. This version already was available for Linux and 
Windows . . . Version 9.0 of Crystal Enterprise, the database report- 
ing package from Crystal Decisions Inc., adds new ad hoc reporting 
and analysis features, data-driven alerting via e-mail, new tools for 
reusing common report components, and tighter integration with 
COM, Java and .NET applications . . . OpenLink Software Inc. is offer- 
ing a public beta of Virtuoso 3.0. The 
update of the cross-platform database serv- 
er now works with Microsoft's .NET, as well 
as Mono, the .NET compatibility project for 
Linux . . . Softel vdm Inc. has updated its 
Masked Edit Field control for Windows. SftMask/ATL 5.0, delivered 
as an ActiveX component, integrates with VS.NET's Help engine, and 
also offers improved auto-completion and a pop-up calculator. The 
component costs US$339 per developer, and is royalty-free 
. . . Numerical Algorithms Group Ltd. will be releasing a Core Math 
Library for AMD's 64-bit Opteron and Athlon 64 processors 
. . . Desaware Inc. is offering NT Service Toolkit for .NET, which 
makes it easier to test and debug Windows NT services that use .NET 
managed code and the .NET Framework. The ► continued on page 14 





Making Applications Behave 
In Production Environments 

Wily, PATH introduce management tools for 'live' apps 



BY DAVID RUBINSTEIN 

Claiming that software 
testing falls short once 
an application is placed 
into a live environment, 
two companies— Wily 
Technology Inc. and 
PATH Communications 
Inc.— late last month 
released products into 
what is being called 
the application behavior 
management space. 

Wily released version 
4 of its management 
solution, which includes 
Introscope version 4 and 
two new extensions to 
Introscope— Transaction Tracer 
and Leak Hunter. Transaction 
Tracer brings visibility to transac- 
tions down to the Java Virtual 
M achine (JVM ) level, according 
to Lew Cirne, founder and CTO 
of Wily (www.wilytech.com), 
while Leak Hunter is designed 
to help IT teams find memory 
leaks in production applications. 

"There are lots of tools that 
help developers develop, test 
and deploy, and there are lots 
of application monitors," said 
Mike M alloy, marketing com- 
munications vice president at 
Wily. "Now, developers are told 
by systems management that 
the app isn't running right and 
it's your problem; you figure it 
out." Wily's new tools, he said, 
give developers the specific 
details they need to fix prob- 
lems because they're running 
on the app in a live production 
environment, not on a desktop 
or in a QA lab. 

"I t's so difficult and expensive 
to replicate a production envi- 
ronment in a staging environ- 
ment, that folks reboot systems 
on a frequent basis just to avoid 
having to deal with a leak prob- 
lem," M alloy said. "That's not 
real good systems management. 
What you're doing is destroying 
quality of service. Your availabil- 
ity goes into the low 90s, and if 
you have a 24/7 critical app, 
that's unacceptable." 

Meanwhile, PATH has re- 
leased version 3.5 of its Path 
Application Manager (P.A.M.), 
which utilizes intelligent agents 
to recognize patterns of behav- 
ior in software and anticipate 
failure, according to Oded Noy, 
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Wily users can create a dashboard to monitor whole apps. 



co-founder and CTO of PATH 
(www.contactpath.com). 

"We're getting into an area 
where applications are so inter- 
twined that things occur [in the 
application] that never hap- 
pened in testing. What we do is 
really a software M Rl," Noy said. 

The P.A.M . solution includes 
Examiners, which are the in- 
telligent agents— discrete Java 
applications— that can be 
placed on multiple servers to 
take snapshots of applications 
when they are running, looking 
at throughput, responsiveness, 
resource utilization and XM L 
parsing, among other things. 
These snapshots then are 
processed in a central server, 
which establishes a pattern of 
behavior for the software. 

I f there is an abnormal spike 
in the activity of the XM L pars- 
er, for instance, or a method 
takes longer to execute than 
expected, the developers with 
domain experience can come in 
to assess and fix the problem. 
"You can find the problem 
without having to assume what 
it might have been. This points 
you to a method and says it's not 
normal," Noy said. 

P.A.M . users, N oy added, can 
check the performance at any 
time with a browser-based client 
monitor that does not require a 
VPN for connectivity. The solu- 
tion is Java-based, but Noy said 
support for M icrosoft .NET will 
be completed byM arch or April. 

One P.A.M . server can han- 
dle 100 agents, Noy said, and 
sells for U S$5,000 per server. 

Wily, meanwhile, has rolled 
out Wily 4, which enables IT 



organizations to monitor 
their live applications 
around the clock, with 
the ability to drill down 
to assess performance 
issues. 

The key new features 
in Introscope 4 include a 
free-form control dash- 
board, which developers 
can customize "down to 
the very pixel," Cirne 
said. "As every applica- 
tion and environment 
are unique, customers 
can take this vast array 
of deep data and convey 
it how they need it. A 
DBA wants to look at the data 
set in a different way than the 
developer." Introscope 4 also 
introduces environment perfor- 
mance agents, which collect data 
external to the JVM , and pro- 
vides metrics to show how other 
factors impact that JVM s perfor- 
mance, Cirne said. 

C irne said I ntroscope Trans- 
action Tracer can automatically 
discover those transactions that 
are running slower than the 
time set in a predefined para- 
meter. "We call it 'speed trap 
technology' Say we want to see 
the transactions that take more 
than 10 seconds. We only get 
the bad ones without having to 
go through all transactions." 
I ntroscope employs agents that 
are deployed in theJVM s of the 
Java applications being man- 
aged; the agents report to an 
enterprise manager that corre- 
lates the information and pre- 
sents it to the user. 

Leak Hunter solves what 
Cirne called "the No. 1 problem 
that affects Java application 
performance"— memory leads. 
"This tool has the ability to 
reduce downtime in Java appli- 
cations more than anything 
that's on the market," he 
claimed. Leak Hunter identi- 
fies tied-up memory allocations 
so the user can quickly target 
the responsible component, 
whether it's an E nterprise J ava- 
Bean or aJavaServlet. 

I ntroscope 4 is sold on a per- 
server processor basis; the base 
price for a single processor is 
just over U S$6,000, C irne said. 
The new extensions cost about 
$2,000 each, he added. I 
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JMX Studio Gets SOAP Adapter 



BY DAVID RUBINSTEIN 

To allow developers and admin- 
istrators to access data from 
applications built from Web 
services, AdventNet Inc. has 
included a SOAP adapter in the 
recently released version 5 of 



its M anageE ngine J M X Studio 
management tool. 

According to chief technolo- 
gy officer Tony Thomas, the 
goal isto allow the instrumenta- 
tion exposed using JMX Studio 
to be used by multiple applica- 



tions at the same time. The 
adapter is based on Apache's 
Axis SOAP implementation. 

AdventN et (www.adventnet 
.com) cut its teeth providing 
application management tools in 
the telecom and data networking 



space before moving into J2EE 
application management, said 
Thomas, and Sun'sjava M anage- 
ment Extensions (JMX) specifi- 
cation provides a standard way to 
add management instrumenta- 
tion to enterprise applications. 
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"You could write your own 
instrumentation with the JMX 
API /'Thomas said, "but this tool 
minimizes the amount of work 
developers have to do." He 
explained that developers using 
J M X Studio simply load an E J B 
or servlet component into the 
tool, which automatically gener- 
ates the instrumentation so it can 
be viewed in a console. While 
AdventN et offers a management 
console as part of its M anage- 
E ngine solution, Thomas noted 
that JMX Studio can be used 
with any console that supports 
SNMP or JMX. AdventN et's 
console supports only BEA's 
WebLogic application server. 

Thomas also said that when 
issues arise in applications after 
deployment, JMX Studio lets 
developers build monitors into 
the application after deployment. 

Other new features of JMX 
Studio, which sells for US$3,000 
per developer seat with a deploy- 
ment fee of $500 per processor, 
include support for TIBCO's 
application integration and busi- 
ness process management envi- 
ronment and Apache's Tomcat 
servlet engine. I 

Sagent Opens 
Links to Data 
Via ODBC, JDBC 

BY DAVID RUBINSTEIN 

Data integration solution ven- 
dor Sagent Technology I nc. has 
added ODBC and J D B C access 
to multiple data sources with 
the introduction into beta earli- 
er this month of an enterprise 
information integration tool 
called OpenLink. 

OpenLink, which the com- 
pany (www.sagent.com) says is 
SQL -92 compliant, allows third- 
party applications using stan- 
dard ODBC orJDBC interfaces 
to connect with Sagent's Access 
Server, which acts as an in- 
memory cache for data called 
out of back-end systems. 

According to Sagent market- 
ing vice president Dave H enry, 
OpenLink gives developers an 
easy way to integrate data. 
"Sagent can be the standard 
middleware tier for analytics in 
the middle of business intelli- 
gence environments" such as 
those sold by Brio Software or 
Business Objects, H enry said. 

OpenLink sells bundled with 
Access Server for U S$70,000 per 
server with two processors. Ver- 
sion 5 of Access Server goes into 
beta midyear, H enry noted. I 
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Xerox to Transform 
XML With Circus 

Claims new language handles structured, 
XML documents better than C, Java 



BY EDWARD J. CORREIA 

Xerox Corp. is previewing an early edition 
of Circus-DTE, a new programming lan- 
guage for developers building applica- 
tions that access and transform XM L and 
other types of structured documents. 

According to C hrister F ernstrom, area 
manager for contextual computing at 
the Xerox Research Center Europe in 
Grenoble, France, where the language 
was invented, Circus-DTE (data transfor- 
mation environment) gives developers 
control over output that would be diffi- 
cult to achieve with today's languages. 
"You could write the code in Java or C, 
but it would be very tedious. C ircus gives 
you a specific, dedicated type control for 
error detection," he 
explained. "For exam- 
ple, you can specify an 
integer between 20 
and 40, and Circus will 
automatically detect 
consistency. There's no 
need for the program- 
mer to insert state- 
ments to check that. " 

Circus introduces 
several new primitive 
and structured types 
and new ways to use 
others that F ernstrom 
claimed are better 
suited to text and 
structured document 
processing common 
with XML. "Many 
Web sites today store their contents as 
XM L , and then apply different transfor- 
mations for users. Often those transfor- 
mations involve many stages," which he 
said can include data extraction based 
on personalized set- 
tings, user profile, 
device type or topic. 
"You can rely on Circus 
typing mechanisms to 
get guaranteed results. 
Your input [can be] 
validated against one 
DTD, output against 
another, and Circus 
can guarantee that 
the transformations are 
performed correctly." 

According to Circus 
inventor Jean-Yves Vion-Dury, a Xerox 
research scientist, Circus is unlike 
XM L's transformation language, XSLT. 
"XSLT does not perform any type 
checking on your programs," he said, 
leaving the possibility to generate incor- 
rect results, particularly when highly 




Circus gives spe- 
cific type control 
for error detec- 
tion, says Xerox's 
Fernstrom. 



CIRCUS TYPES 

STRING/BYTE - Natively supports 
16-bit Unicode and 8-bit byte strings, 
simplifies document manipulation. 

REGULAR SEQUENCE - Defines 
sequences of allowable values (inte- 
gers, strings, etc.) with built-in type 
checking appropriate for XML DTDs. 

READ-ONLY REFERENCE - Elimi- 
nates potential for unwanted side 
effects. 

RECURSIVE - When combined with 
records, references and regular 
sequences, permits capture of XML 
or HTML trees and modeling of graphs 
and other complex structures. 

Source: Xerox Corp. 




i 

XSLT fails to 
perform any 
data-type check- 
ing, says Xerox's 
Vion-Dury. 



complex transforma- 
tions are involved. "If 
you want to cascade 
several transforma- 
tions, if you do not ver- 
ify at some level, the 
end result might be no 
result at all." 

Fernstrom explained 
that while XSLT pro- 
grammers rely on 
DTDs, or Document 
Type Definition, for a 
description of the doc- 
ument structure, no hard links exist 
between the DTD , the language and the 
output. "The strength of Circus is the 
coherence between 
the specification of 
the formats and the 
algorithms that you 
use for the extrac- 
tions or transforma- 
tions from one format 
to another. [There's 
a link] between the 
specification of the 
structures and the 
transformations of 
those structures." 

Fernstrom assert- 
ed that Circus is 
applicable to areas 
other than Web and 
XML development. 
"It applies well to 
document-intensive 
industries, such as automotive, where 
they have complex documents they 
need to adapt and perform operations 
on. Another area is Web services, 
where you're not really working with 
documents but with structured data 
between services, as for supply-chain 
management, [in which] work is pro- 
duced by one organization and needs 
to be understood by another, and 
where you might need to insert 
adapters that transform from one 
structure to another. It's important to 
get these transformations correct." 

Circus also can be used in conjunc- 
tion with XSLT. "Often we use Circus 
for the first stages of transformation, and 
then when things have more to do with 
layout, we use XSLT," he said. 

Available now with a 90-day evalua- 
tion license, the Circus-DTE preview 
compiler, tutorial and sample code for 
Linux, Solaris and Windows can be 
downloaded at www.alphaave.com, a 
Web site from Xerox. The company gave 
no time line for general release. I 
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Quietly, Microsoft Shelves Plans to Release Help 2 

But vendor eHelp steps in with RoboHelp .NET, promises delivery of help 'standard' 



BY ALAN ZEICHICK 

Last month, Microsoft Corp. 
quietly let it be known that it 
was dropping its plans for H elp 
2, a new help file format and 
runtime facility that was expect- 
ed to appear in early 2003. 
Help 2, the replacement for 
Microsoft's 5-year-old HTML 
Help 1.1, had been previewed 
by M icrosoft for several years, 
and the runtime engine had 
been available since mid-2001 
and was included with Visual 
Studio.NET. 

The information was posted 
to a Microsoft Help news- 
group by Shane McRoberts, 
the company's lead program 
manager for its H elp program. 

"The Microsoft Help team 
has decided not to release 
M icrosoft Help 2 as a general 
H elp platform. This is primari- 
ly in response to customer 
feedback that the most impor- 
tant thing is providing a stan- 
dard Help experience on 
everybody's machine," wrote 
McRoberts. "With that in 



mind, we are focusing our work 
efforts on providing a great 
Help experience in the next 
client release of Windows 
(codename longhorn') rather 
than on releasing an interim 
solution that is not integrated 
with the operating system." 
The Longhorn version of Win- 
dows is not expected to appear 
until the end of 2004, or later. 

"While Microsoft develops 
future Help technologies, we 
encourage Help authors to 
continue using HTML Help 
1.x," McRoberts continued. 
"The Help 2 engine will con- 
tinue to be provided with sev- 
eral of M icrosoft's developer- 
related products, including 
Visual Studio.NET." 

Despite repeated requests, 
M icrosoft was unable to make 
M cRoberts or another member 
of the Help team available to 
explain the customer feedback, 
or the impact that closer inte- 
gration with the Longhorn 
operating system release would 
have for users of other versions 



of Windows. However, eHelp 
Corp., which offers help tools, 
was quick to proclaim that it 
was working on a new "stan- 
dard" to replace Help 2. 

Mike Hamilton, product 
manager for eHelp's Robo- 
Help X3 help authoring sys- 
tem, said that M icrosoft's 
move leaves developers in the 
lurch. "There are several 
known issues with HTML 
H elp that M icrosoft has never 
addressed. With Help 2 no 
longer on the horizon, people 
are upset that they've had to 
live with these HTML Help 
issues for so long." 

In response, Hamilton said, 
eH elp (www.ehelp.com) will be 
developing new tools for Win- 
dows developers, plus its own 
advanced format. "Short term, 
there will be a new version of 
RoboHelp targeted at .NET 
developers, which will support 
not only the Windows Forms 
desktop applications and stan- 
dard applications, but also Web 
services applications." 



But more than extending 
RoboH elp, H amilton said, "we 
have officially said that we will 
be releasing a new H elp stan- 
dard this year. With the 
demise of [Microsoft's] Help 
2, it makes it a good time to 
bring something out. The 
goal is to provide cross-plat- 
form capability, but make it 
simpler and easier to deploy." 
The cross-platform issue, he 
stressed, was a problem even 
with Help 2: "What made 
us nervous about Help 2 was 
that it was a very good 
M icrosoft solution, but it was a 
terrible solution for Mac or 
Unix environments." 

When asked if eH elp would 
be releasing its new format for 
general industry use, or work- 
ing with M icrosoft or other 
vendors to create a multiven- 
dor specification, Hamilton 
replied, "That is yet to be 
determined." But, he claimed, 
eHelp is talking with another 
company— which is not M icro- 
soft— to collaborate on that 



format. H e wouldn't name the 
company, provide a time line 
for the release of the new for- 
mat, or even hint at the for- 
mat's capabilities beyond the 
cross-platform support. "I'm 
trying to be careful not to 
damage those negotiations," 
Hamilton said. 

As far as the short-term 
release, Hamilton said that 
RoboHelp .NET, which expos- 
es help via Web services on a 
.NET-based server, should be 
generally available by mid- 
February. The new release, he 
said, would work with M icro- 
soft's Visual Studio .NET and 
other .NET-compatible IDEs, 
and includes a runtime engine 
that uses the .NET Frame- 
work. "As long as [the IDE] 
uses all the rules of .NET, it 
should be fine," he said. 
Hamilton stressed that in 
addition to supporting eH elp's 
own help formats, RoboHelp 
.NET would continue to sup- 
port Microsoft's HTML Help 
format. I 
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Software Estimation: 
In-Depth Workshop, 

A Key to Your Software 
Project Success. 

March 4-5 in New York, NY 
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A two-day Software Estimation: In-Depth Workshop 
will be presented by Conslrux Software, March 4-5 
al the Millennium Broadway Hotel, New York, HV, 

Steve McConnell, CEO and Chief So-flwarc Engineer ol 
Construx Sortware, will teach you elective techniques lor 
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Macromedia Offers MSDN-Style Subscriptions 



BY DAVID RUBINSTEIN 

Borrowing a page from Micro- 
soft D eveloper N etwork, M acro- 
media I nc. last week launched a 
software subscription service 
aimed at developers as a way, it 
says, to simplify budgeting for 



new software as well as to get 
the latest technical information 
into their hands. 

Called Macromedia DevNet, 
the service gives developers 
access to M acromedia devel- 
opment tools, servers and 



new Developer Resource Kits 
(DRKs), the first of which, 
released in September 2002, 
featured a data grid that could 
be used in Flash applications 
and authentication and log-on 
tools for developers using the 



PHP language, according to 
Tom H ale, senior vice president 
of business strategy. 

"The model for this is 
MSDN," Hale said. "We decid- 
ed ourcore value was theDRK, 
and this allows us to innovate 



Deliver gour imaging project 
on time and under budget. 

(Rnd look like a genius.) 



use ifce powerful software development tools and compression technologies from 
Pegasus imaging to build your document Imaging or forms processing application. 
From scanning to viewing, editing, to barcode recognition, these toolkits will exceed the 
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out of our usual cycle, which is 
12 to 18 months. We will ship a 
new CD every quarter with 
software components or exten- 
sions to [M acromedia's devel- 
opment suite] Studio M X." 

The subscription service 
costs US$1,599 with annual re- 
newals at $999; an Essentials 
level, comprising the Develop- 
er Resource Kits, but without 
server or development tools, 
costs $299 annually, H ale said. 

The company (www.macro 
media.com) also released an 
update to Studio MX, which 
now includes a full "MX" ver- 
sion of the F reehand multipage 
layout publishing solution and 
a new product, Macromedia 
Contribute, which is a client- 
side Web authoring tool. I 

XML SPY 

•* continued from page 1 

For Oracle compatibility, 
XM L Spy 5.3 now can directly 
load and save XM L schemas 
from Oracle XML DB. It also 
can browse, open, edit and 
save XML documents in the 
Oracle database using the 
WebDAV protocol. WebDAV, 
or Web Distributed Authoring 
and Versioning, is an IETF 
extension to H TM L for remote 
file manipulation. 

According to Altova (www 
.altova.com), the new XML 
Spy also can automatically gen- 
erate Web Services Descrip- 
tion Language (WSDL) docu- 
ments for a collection of Web 
services, and can generate 
content files in Adobe Portable 
Document Format (PDF) 
using XSL stylesheets. 

In addition, XML Spy 5.3 
now ships with a Java API that 
allows it to be invoked or con- 
trolled from Java applications; 
previous versions of XM L Spy 
included a COM component 
for integration with Windows 
applications. 

A third-party tools provider, 
Hit Software Inc. (www.hitsw 
.com), has added support for 
XML Spy 5.3 to Allora, its rela- 
tional data access tool, through 
a plug-in. Hit also has created 
new Allora plug-insfor Ixiasoft's 
TextM L XM L server, and for 
racle's J D eveloper J ava IDE. 
Allora generates mappings 
between relational databases 
and XM L documents, using an 
IDE and runtime application to 
dynamically convert the data 
bidirectionally. I 
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The Only Defect-tracker with a Beta Customer Portal 
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Beta Customer Portal 



Make yojr Beia customers part 
of your QA tearnl Give them a 
secure, personalized web aortal 
to submit, track, and update 
Issues. Let them create & 
assign sub jsslss ia rii r eel 
comments to specifc teams. 



QA Test Plan Management 



Automate your QA test olan 
management, When resolved 
issues or bugs enter the QA test 
staie, new test events can be 
crested and assigned to QA 
ergineers automatically, Wher 
those evems are compete. The 
issue or bug can he c osed 
automatically. 



Manage your development and defect-tracking processes. 



► Configure workflow to match your software development life cycle, 

► Issue & sub-issue automation; completion of one can trigger creation and assignment of 
another. 

► Full-featured web interface for internal teams & Beta customers. 

► Email submission & notification with an extensive list of triggers & recipients. 

► Point-and-click query builder lets you search on any field. 

► Total customization of GUI to fit your business, 

► Role- and state-based access control at page and field levels. 

► Numerous-, customizable, presentation-quality reports, 
*■ Fully integrates with MS Visual SourceSafe & Perforce. 




See for yourself! 

View a brief, pre-recorded 

demonstration on DevTrackS.l's 

new features. 



www.devtrack.com 



TeehExcel 



Tolt-free (300) 43^7782 

International (925)871-3900 
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, MORE PRODUCTS , 



© ProSyst 



- continued from page 6 

toolkit costs US$499 . . . Reliable Software LLC has updated its Code 
Co-Op version-control system. Version 4.0 now works with mobile 
users, and includes a visual diff utility. The software costs US$159 per 
seat . . . E-Tech Solutions Pvt. Ltd. is now offering Rapid Dotnet 
Migrator, a framework for moving software to Microsoft's .NET and 
BizTalk Server . . . Sun Microsystems Inc. has delivered its Sun ONE 
Application Server 7 and Sun ONE Directory Server 5.1 on Linux, 
and promises to deliver its portal, identify, calendar and messaging 
servers on Linux by the end of 2003 . . . The German firm ProSyst 
Software AG has released OSGi plug-ins for 
Borland's JBuilder and IBM's Eclipse IDEs 
that allow them to work with Open Scalable Gateway Initiative-com- 
pliant embedded network applications . . . Version 1.2 of Crossover 
Plugin, a Linux browser add-on from CodeWeavers Inc., now allows 
Linux developers to run ActiveX controls embedded in Web pages and 
HTML documents. The US$24.95 package, which works with Mozilla, 
Netscape, Opera and others, also improves compatibility with Win- 
dows Media Player ... A new tool from London tools provider Con- 
sonica Ltd. lets existing ASP Web applications run within Microsoft's 
ASP.NET. StateStitch, priced at US$295 or €299 per server, allows 
ASP and ASP.NET applications to share session data, so that applica- 
tions can be ported incrementally . . . Synergration Inc. is offering an 
ActiveX DLL, called CoreObjX, that provides programmatic access to 
Intuit's 



OuickBooks 2002 Professional 
small-business accounting package in place 
of QuickBooks' own SDK. The royalty-free component costs US$495 
per developer seat . . . Micro Focus International Ltd. is now offering 
an HP-UX version of its Server Express COBOL compiler and devel- 
opment environment. It runs on both the PA-RISC and Itanium 
processors, and is source-compatible with Server Express for other 
versions of Unix . . . Softlntegration Inc. has updated Ch, its C/C++ 
interpreter for scripting and graphics. Version 3.5 of the US$99 utili- 
ty adds command-line editing, as well as new scripting features for 
shell programming and numerical computing . . . Version 1.1.8 of Wing 
IDE, the Python development environment from 
Archaeopteryx Software Inc., enhances the debugger, 
making it easier to work with code that reloads Python 
1 1.,.< iiu modules at runtime. The US$179 IDE runs on Linux, Mac 
OS X, Unix and Windows . . . Etnus LLC has updated its TotalView C++ 
debugger to support IBM's 64-bit Power 4 Regatta servers, Sun's 64- 
bit architecture, and Linux-based Beowulf clusters. Version 6.0 also 
works with gcc 3.2 and version 7.0 of Intel's C++ and Fortran compil- 
ers for Linux. 

, PEOPLE , 

Altaworks Corp. has appointed David Danielson as its CEO. Daniel- 
son, who had served as CEO of Acuitive Inc., takes that role from 
Stephen McCalmont, who remains chairman . . . The Irish company 
Programming Research Group, which sells source-code analysis tools, 
is opening a U.S. office and has appointed Robert Buckley as CEO for 
American operations. Buckley previously worked at Eastman Kodak 
and Sun . . . Jeff Tonkel is the new president and CEO of Infravio Inc., 
which provides Web services management software. Most recently 
CEO of Envive Corp., Tonkel replaces Eileen Richardson, who left the 
company . . . Vitria Technology Inc. has hired Gary Velasguez as its 
president and COO. Velasquez, who served as a division president of 
Health Net Inc., also will serve as Vitria's CFO, replacing Graham 
Smith, who left the company in late January. 

, STANDARDS , 

OASIS has formed the PKI Forum, a technical committee to 
advance public-key infrastructure adoption for secure transac- 
tions. The group also has launched an effort to replace Uniform 
Resource Identifiers (URIs) with Extensible Resource Identifiers 
(XRIs). The new XRI Technical Committee also will develop a 
namespace for XRIs. I 



Borland Announces Earnings, Reshuffling 

New business unit to focus on TogetherSoft product line 



BY ALAN ZEICHICK 

Borland Software Corp., flush 
from a solid earnings period 
that ended Jan. 31, has formed 
a business unit to accommodate 
its newly completed acquisition 
of TogetherSoft Corp., and has 
brought in George Paolini, a 
senior marketer formerly with 
Sun M icrosystems I nc 

According to the company, 
Borland's 2002 revenues were 
US$244.6 million, 10 percent 
higher than the previous year's 
revenues. This included $4.4 
million of revenue attributable 
to Starbase Corp., which Bor- 



land acquired in November. 

However, net earnings for 
the fourth quarter of 2002 
were only half that of the same 
quarter a year earlier, falling 
from $6.2 million in 2001 to 
$3.1 million in 2002. Still, this 
represents 11 consecutive 
quarters of profitability for the 
company, which has a large 
cash reserve and no long-term 
debt, according to CEO Dale 
Fuller. 

At the end of January, Bor- 
land closed its acquisition of 
TogetherSoft, and formed a 
TogetherSoft Business Unit, to 



be headed by Tony de la 
Lama, formerly general man- 
ager of the company's Java 
Business Unit. 

Replacing de la Lama as 
general manager of the Java 
team is Paolini, formerly Sun's 
vice president of software mar- 
keting. Paolini, who headed up 
Sun's Java Community Process 
from 1999 until 2001, resigned 
from Sun in June 2001 to 
become chief marketing officer 
of Zaplet Inc., a company that 
sells e-mail-based collaborative 
business process management 
tools. I 



OPTIMIZER 

•« continued from page 1 

director of product manage- 
ment in Borland's Java Busi- 
ness Unit, the new Optimizeit 
ServerTrace is designed for 
predeployment testing of J2E E 
applications, as well as for 
tracking down performance 
problems in the field. 

"ServerTrace provides insight 
into where performance prob- 
lems occur in J2EE systems," 
said Pataky. "If you think about 
traditional performance tools, 
like those from M ercury Inter- 
active, they're really effective at 
putting a load on a system and 
measuring response time. But 
when you find out that the 
response time isn't what you 
need, you're out of luck. You 
have to send the whole applica- 
tion back to the engineering 
shop. That's a labor-intensive, 
and often politically intensive, 
discussion to have." 

Pataky contrasted Server- 
Trace with the growing number 
of post-deployment "flight 
recorder" monitoring tools such 
asOC Systems' Root Cause and 
Performant's OptiBench, that 
are installed on production 



servers. Instead, he said, 
ServerTrace is designed for test 
teams to run themselves, in the 
QA lab, and provides reports 
that can identify performance 
problems. In fact, he said, Bor- 
land recommends that cus- 
tomers not deploy ServerTrace 
on production servers. 

Beyond server-side perfor- 
mance profiling, the product 
includes a new code analyzer, 
which Pataky called the Auto- 
matic Application Quality Ana- 
lyzer. H e described it as a lint- 
like utility that provides a 
line-by-line semantic review of 
Java source code. "While the 
code may be syntactically cor- 
rect, it may be semantically 
problematic, and cause perfor- 
mance or quality problems 
down the road." 

What types of problems? 
"For example, say a piece of 
code is trying to serialize a non- 
serializable object," said Pataky. 
"It will work, but if you don't 
have a performance issue now, 
you may later. Or, you may be 
doing a read-only query on a 
database, but in the middle, for 
some reason, there's a write 
going out to the database. This 
might not show up as a perfor- 



mance problem now, but when 
you scale the system, you don't 
want to be doing unnecessary 
writes to databases." 

Optimizeit ServerTrace, which 
Pataky said will run with any 
major J2EE application server, 
is currently available for 
U S$20,000 for a dual-processor 
test server. 

Separately, Borland an- 
nounced that it has licensed 
Microsoft's .NET Framework 
software developer kit, and will 
be bundling it with its.NET lan- 
guages. The SDK, which in- 
cludes the Common Language 
Runtime, class libraries and oth- 
er fundamentals required to 
build .NET applications, will be 
slipstreamed into the current 
version of Delphi, Borland's 
Object Pascal compiler and edi- 
tor, and will be added to the next 
release of C++ Builder. 

Although the .NET Frame- 
work SDK is available at no 
charge from M icrosoft, devel- 
opers previously acquired it by 
purchasing it as part of Visual 
Studio .NET, through their 
M icrosoft Developer Network 
subscription, or as a 131M B 
download from http://msdn 
.microsoft.com. I 



MODELING 



■* continued from page 1 

tor of design and modeling 
solutions at Embarcadero (www 
.embarcadero.com), said Describe 
is tightly integrated with ER 
Studio, Embarcadero's data 
modeling tool. The bundling, he 
said, "broadens the scope of 
what modeling meansto individ- 
ual Java developers." 

Keller sees the partnership 
as less a knee-jerk reaction by 
Sun than a validation of model- 



ing. "If you look historically at 
the problems modeling had, 
there was a disassociation be- 
tween the modeling tools and 
I D E s. With the progressive way 
of putting modeling inside the 
IDE, we want to remove fric- 
tion. We're providing a bread- 
crumb trail of what you've built 
and how it integrates with the 
rest of the [enterprise]." 

Sun ONE Studio and 
Describe come in a two-CD 
set, with Sun acting as a chan- 
nel partner for the Embar- 



cadero tool. 

After the IDE is installed, 
the modeling tool will appear 
as a native piece of the IDE. 
Sun will ship a time-limited, 
full-featured evaluation copy 
of Describe, and if Sun ONE 
Studio customers decide to 
buy it, they will have to pur- 
chase Describe from Embar- 
cadero. Sun ONE Studio 4, 
E nterprise E dition is priced at 
US$1,995, while Describe for 
Sun ONE costs $995 and is 
available now. I 
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DreamFactory Envisions Rich-Client Interfaces 

Start-up Web app development tool binds XML to Ul, reducing bandwidth needs, latency 



BY DAVID RUBINSTEIN 

Claiming to introduce "the dis- 
play component of the new 
I nternet," Silicon Valley start-up 
DreamFactory Software Inc. 
this week is entering the bur- 
geoning rich-client market with 
its DreamFactory Profession- 
al XML -based user interface 
authoring tool and Web applica- 
tion development platform. 

"HTML is reaching its limits 
in this new world," argued Bill 
Appleton, president and chief 
scientist at D reamF actory (www 
.dreamfactory.com). "HTML 
was really set up to click a but- 
ton, get a page. It works great 
for publishing. But new Web 
apps want to be aggregations of 
many things on a single screen." 

The great thing about Web 
pages, Appleton continued, is 
the ability to link to another 
Web page from an open page. 
Before DreamFactory Profes- 
sional, and the accompanying 
DreamFactory Studio client 
runtime, Appleton maintains, 
this linking of Web services 
could not be accomplished. 



j j a i m 




A portal built with DreamFactory Professional utilizes rich media. 



Web services and standards 
are allowing this to happen, 
Appleton said, by making 
sophisticated services and busi- 
ness logic available in the mid- 
dle tier. "It's a real sea change 
that's flipping client software 
on its head. Now, things 
authoring tools always have 
been good at can be hooked to 



business logic, and the result is 
that it won't require deep sys- 
tem programmers." 

The DreamFactory rich- 
client model, Appleton ex- 
plained, is similar to M acrome- 
dia's Flash in that it's a single 
file-format protocol that con- 
tains both content and exe- 
cutable commands, in this case 



using JavaScript. The content, 
downloaded by a standard HTTP 
server, is interpreted by the 
DreamFactory Studio browser 
plug-in for Netscape or Inter- 
net Explorer, running on either 
Macintosh or Windows. But 
where Flash is focused on 
graphics, Appleton said, "in- 
stead of animation, we do infor- 
mation." DreamFactory Studio 
also allows users to modify the 
presentation of the XM L data 
during runtime. 

DreamFactory binds XM L 
to rich-media user interfaces 
created by the development 
tool, and thereby greatly 
reduces bandwidth require- 
ments and latency, Appleton 
claimed, adding that the pro- 
gram has no dedicated server 
component; it can integrate 
with XML servers anywhere 
directly from the client. 

"XML is built into the 
ground floor of D reamF actory," 
he said. "It works like Java- 
Script, but you can look at 
arrays or objects or structures 
and they look like XML. The 



XM L is the data. W hat we have 
is really the first post-XM L 
authoring solution" for in- 
terfaces; D reamF actory 's Ul 
building blocks include most 
types of styles of pop-up con- 
trols, such as buttons, drop- 
down lists and tool bars." 

Appleton, who worked on 
development of the once- 
popular SuperCard hypertext 
authoring system for M acin- 
tosh, and then for The Walt 
Disney Co. building user inter- 
faces, said network topologies 
were defined by the arrows 
between nodes. Now, the 
labels on those arrows are not 
as important since they all are 
XML. "Now, the attention 
shifts to the nodes them- 
selves," he said. 

DreamFactory Professional, 
currently in beta, is being 
offered at no charge; the com- 
pany will charge licensing fees 
of between US$10 and $40 per 
client for intranet applications. 
Internet deployment pricing 
details still are being worked 
out, he said. I 
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QNX Adds Layering to Neutrino API 

Expanded profiling tool looks at complete embedded systems 



BY EDWARD J. CORREIA 

QNX Software Systems L td . was 
scheduled last week to release an 
update to its Photon microGUI 
native windowing system for 
N eutrino that will support video 
compositing, giving developers 
the ability to present dynamic 
data from multiple applications 
in a single, multilayered display. 
The new API will be delivered 
with M omentics 6.2.1, the latest 
version of Q NX's Eel ipse- based 
C/C++ and Java development 
environment that also will 
reportedly include a new profil- 
ing tool. 

According to M omentics 
product manager Steven Furr, 
the ability to overlay output 
from multiple applications is far 
from trivial. "The calculations 
for those might be radically dif- 
ferent. For instance, [let's say] 
you have a math display that 
requires intensive calculation 
with an overlay on top of it. If 
you tried to render them both 
on the same display, every time 
you update one image you'd 
have to recalculate both images. 
Under normal circumstances 
you'd get a lot of interference." 

Furr added, "Other RTOSes 
make you access the hardware 
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QNX's System Profiler, left, can graphically analyze the activities of a complete embedded system as it runs, helping to identify timing problems. At right, 
multilayering capability in the Photon microGUI API simplifies the composite display of dynamic data from individual or multiple applications. 



directly yourself in order to 
take advantage of [composit- 
ing]." The alternative, he ex- 
plained, would require the 
developer to partition one of the 
display planes away and render 
to it separately. "That means that 
you're not using the same API 
and you have to do a lot of the 
coding yourself." 

Furr said the QNX (www 
.qnx.com) solution, which ab- 
stracts the hardware, enables 
developers to code in less time 
and with greater hardware effi- 



ciency. "With compositing, you 
can render the different planes 
independently and radically 
reduce your resource utiliza- 
tion. And the code is portable 
to other Photon-based applica- 
tions or devices without know- 
ing in advance what the display 
capabilities [of the target hard- 
ware] are." 

Multilayered applications 
come into play in automotive 
navigation systems, military com- 
mand and control systems, med- 
ical instrumentation, industrial 



control and emergency response 
centers, according to F urr. 

M omentics 6.2.1 also deliv- 
ers System Profiler, a visual 
analysis and debugging tool that 
F urr claimed can give develop- 
ers a view inside a running 
embedded system to determine 
where applications are spend- 
ing time. "It shows you a trace 
of what's running at any given 
time— processes or threads— as 
well as all of the interactions 
between those components, 
and displays graphically where 



anomalies appear. Developers 
can use this as a diagnostic tool 
to see potential sources of tim- 
ing-related problems, problems 
related to the interactions 
between systems components, 
and to identify performance 
bottlenecks." The company's 
previous profiler looked only at 
individual applications. 

M omentics 6.2.1 for QNX, 
Solarisand Windows was sched- 
uled for release on F eb. 14; the 
new tools are free to existing 
M omentics subscribers. I 



CardSoft Claims Impenetrable Security 

Smart card reader development kit based on FINREAD spec 



BY EDWARD J. CORREIA 

One way to prevent sensitive 
data from being intercepted as 
it traverses the I nternet is nev- 
er to send it at all. That's the 
thinking behind CardSoft 
Inc.'s eAppliance FINREAD 
Platform 1.1, the latest version 
of its smart card reader devel- 
opment platform that the 
company claims is the first to 
embrace the FINREAD 1.1 
specifications for secure finan- 
cial transactions using open 
networks. 

The specifications were 
developed by a group of E uro- 
pean communications compa- 
nies, banks and other financial 
institutions known as the 
FINREAD Consortium (www 
.finread.com), as a means to 
reduce credit-card and online 
fraud, which by some estimates 
will reach €60 billion by 2005. 

According to Don Sweet, 
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The self-contained FINREAD environment performs all encryption locally. 



president and CEO of Card- 
Soft (www.cardsoft.com), FIN- 
READ is superior to public key 
infrastructure (PKI), SSL and 
other forms of encryption 
because private data never 
leaves the card reader. "It's a 



much more secure algorithm 
because [data is] encrypted 
inside the device; it never 
touches the PC and never 
crosses the Internet. PKI and 
other protocols interact with 
the operating system; this does 



not," which he said was one of 
the main requirements when 
developing the spec. "[FIN- 
READ] is its own little system 
and can't be corrupted." 

The eAppliance FINREAD 
Platform, which includes a Java 
development environment and 
a 40KB JVM, is intended for 
developing secure-transaction 
capabilities into point-of-sale 
terminals, cell phones, set-top 
boxes and handheld computers. 
"It can be used in anything that 
requires an end-to-end solution 
talking to a secure server," he 
said, including transmittal of 
health records, Social Security 
numbers or any data suscepti- 
ble to fraud. 

D evelopers use the tools to 
build so-called Stiplets, which 
Sweet explained are tiny Java 
applications executing from a 
Flash card that act as the 
intermediary between the 



smart card and secure back- 
end servers. "Stiplets are the 
key to the whole thing. The 
credit card talks to the Stiplet, 
which talks to the secure serv- 
er, gets authorization, captures 
data and tells the credit card 
the transaction is OK." 

Sweet said that the credit- 
card apps can be built using 
standard JavaCard tools, and 
the back-end apps are general- 
ly running on secure servers 
developed by IBM Corp., 
Verisign Inc. and others. Sti- 
plets arose from the Small Ter- 
minal Interoperability Plat- 
form, an open specification 
developed by the STIP Con- 
sortium (www.stip.org) found- 
ed in 1998 by CardSoft, global 
services company Schlum- 
berger Ltd. and Sun M icrosys- 
tems Inc. 

Available now, the eAppli- 
ance FINREAD Platform 1.1 
includes STIP Java class files; a 
small-footprint, configurable 
JVM; and an IDE with remote 
debugger, and costs U S$75,000 
plus $2,000 per developer seat 
and per-device royalties. I 
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JCP Expert Group Maps Future of J2ME-Based Devices 

CLDC 1.0, MIDP 2.0 form basis of wireless device architecture; test suite due in June 



BY EDWARD J. CORREIA 

There's word from the Java 
Community Process that should 
come as welcome news for 
embedded developers. In late 



January, the 18 cell-phone of Java on wireless devices, for devices around the world. 



makers, telco carriers and Java 
developers working on JSR- 
185, the specification request 
designed to lay out the future 



turned out a road map intend- 
ed to provide an overall wire- 
less architecture and a consis- 
tent Java runtime environment 



According to Nicholas 
Lorain, senior product manager 
for wirelessj ava technologies in 
Sun Microsystems Inc.'s Con- 
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sumer and Mobile Systems 
Group, the move will take 
much of the guesswork out of 
deploying Java apps to mobile 
phones. "This will provide a lot 
of visibility to application devel- 
opers [about which] APIs they 
can expect to be widely avail- 
able. They will be able to better 
plan their strategies around 
J2ME." All of the cell-phone 
makers in the group, including 
Motorola, Nokia, Samsung, 
Sony E ricsson and Vodaphone, 
have pledged to include the 
base set of API sin a majority of 
their devices, he said. 

The group will not develop 
any new API s, but will focus on 
existing or imminent specs to 
establish a baseline for client- 
side J ava app execution, Lorain 
said. Those specifications in- 
clude the Connected Limited 
Device Configuration (CLDC) 
1.0, M obile I nformation D evice 
Profile (MIDP) 2.0, the Wire- 
less Media API, and, if the 
devices have multimedia capa- 
bilities exposed through Java 
APIs, the Mobile Media API. 
Further, devices with Java- 
exposed floating-point capa- 
bilities will require the forth- 
coming CLDC 1.1 (JSR-139), 
which will add FPU support 
and increased error-handling 
capabilities. CLDC 1.1 entered 
final draft phase in December 
of last year. MIDP 2.0, released 
last November, includes en- 
hanced graphics, multimedia 
and messaging support for 
mobile devices. 

The group also will compile 
a list of mobile phone-related 
JSRs in use internationally and 
specify which J2ME compo- 
nents it considers crucial to an 
end-to-end execution from a 
cell-phone environment. 

"As long as people were 
deploying on CLDC and 
MIDP, everything was pretty 
simple," Lorain said. The group 
seeks to simplify development 
by clarifying which optional 
J2M E packages work best with 
which profiles, define how an 
interoperable end-to-end solu- 
tion should work, and will 
describe a migration path for 
applications and profiles as 
devices become more powerful. 
Lorain said a reference imple- 
mentation and compatibility kit 
should be available by June; 
devices conforming to JSR-185 
should be available this fall. I 
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AppForge Now Targets Sony, Nokia 



BY EDWARD J. CORREIA 

Embedded development tools 
maker AppForge Inc. has an- 
nounced that Nokia and Sony 
E ricsson have agreed to include 
its Booster runtime on select 
Symbian OS-based devices, 
enabling enterprise developers 
using Visual Basic to extend 
their applications to the mobile 
devices as well as to similarly 
equipped devices running Palm 
OS, Pocket PC and Symbian OS 
from a single codebase. 

According to Doug Benson, 
vice president of marketing at 

Xilinx Unleashes 
Multimedia Board 

BY EDWARD J. CORREIA 

Xilinx Inc. late last month 
released Virtex- 1 1 Multimedia, 
an addition to its line of recon- 
figurable device-prototyping 
boards based on its Virtex-ll 
field-programmable gate array 
with support for five banks of 
36-bit zero-bus turnaround 
(ZBT) high-speed RAM . 

According to the company 
(www.xilinx.com), the board is 
well suited for prototyping 
video-intensive applications, in- 
cluding satellite up/down link 
systems, digital video recording 
and processing devices, and 
high-end set-top boxes. 

Steve Sharp, senior manager 
of programmable logic solutions, 
said the advantage of an F PGA- 
based board is its flexibility. "It 
lets you try out different ideas 
until you get to a final product." 
He said that by programming 
the target into different itera- 
tions, developers can determine 
whether functions work better in 
hardware or software, and iden- 
tify performance trade-offs. 

Although its customers are 
mainly OEMs, the device has 
several enterprise applications, 
Sharp said, which could include 
set-top box development for 
hotel-based video-on-demand 
systems. "[H otels] can't use an 
off-the-shelf box, because they 
would want to tailor what goes 
on inside the box. They will also 
have to figure out how to dis- 
seminate videos to the rooms 
and bill for it." 

The Virtex-ll Multimedia 
board costs U S$l,400, including 
power supply, cables and an eval- 
uation version of Xilinx's I SE 5.1 
GNU-based C development 
environment; after 60 days, the 
software costs $695 per seat. I 



AppForge (www.appforge.com), 
which develops and markets the 
MobileVB extension to M icro- 
soft's Visual Basic 6.0, the signifi- 
cance of the Nokia and Sony 
E ricsson deals goes beyond the 
convenience of a preinstalled 



runtime. "We bring the entire 
value proposition of M icrosoft — 
its developers and licensees— 
without them having to pay them 
a single dime [in royalties to 
M icrosoft]. Now those develop- 
ers can write with .NET and 



don't have to use [M icrosoft's] 
Compact Framework, and can 
target not only SmartPhone, but 
all these other devices too." 

Benson said that Sony's P800 
mobile device will be its first to 
include an AppForge runtime; 



Nokia's Series 60 phone will be 
Nokia's first. He also said that 
several runtime agreements 
with other vendors are expect- 
ed in the next few months but 
declined to mention specific 
vendors. M obileVB pricing starts 
at US$899 per developer seat; 
applicable runtime royalties vary 
by volume and platform. I 
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Data integration, application 
componentization A 

are the moving force 
within organizations 



BY ANDREW BINSTOCK 



Despite considerable hype during 
the past two years, Web services 
have managed to establish them- 
selves as a useful solution at many 
IT sites. The rate of adoption cer- 
tainly has not been as rapid as first expect- 
ed; however, given the current economic 
climate— especially in IT spending— this 
slower acceptance is still a real achieve- 
ment. The drivers for this acceptance are: 
Web services are simple to understand 
and implement, they're not expensive, 
and they enable solutions that would oth- 
erwise be difficult to assemble. This 
report discusses where and how Web ser- 
vices are being used and what obstacles 
stand in the way of their growth. 

According to a survey performed by 
Evans Data Corp. in late 2002, 36 per- 
cent of corporate developers in North 
America were working on Web services, 
while 25 percent of all developers have 
actually deployed Web services. This 
might come as a bit of a surprise since 
deployed Web services have been nearly 
invisible. In addition, many vendors of 
development tools for Web services suf- 
fered through a dismal year. So where are 
all these deployed services? 

Publicly accessible Web services— 
sometimes referred to as federated ser- 
vices—have barely been deployed any- 

TOOLS FOR WEB SERVICES 

The market today offers a wide variety of tools that take care of 
the programming overhead for developing Web services. These 
tools convincingly remove a tedious chore from the developer's 
task list, but they don't do much in helping formulate the proper 
design of Web services. Even a tool such as BEA's WebLogic 
Workshop, which is one of the most advanced design tools, sim- 
ply allows developers to represent pictorially what functions they 
need, from which it generates the code and wrappers. 

While undeniably helpful, it does not operate at a sufficiently 
high level to enable the intelligent encapsulation of Web ser- 
vices. For example, consider the guestion of granularity. 

At what level should reguests be made of a Web service? 
Suppose a Web service accepts a Social Security number and 
returns financial data about an applicant for a credit card. 
What data should it return? 



where. Only a few large compa- 
nies have rolled out public ser- 
vices: Amazon.com, Federal Ex- 
press, Google, IBM, Microsoft 
and UPS. While applications 
such as Amazon's use of Web ser- 
vices to provide partners with the ability 
to search for specific books appear 
straightforward, many companies have 
been slow to create such simple appli- 
cations. Their hesitation stems from an 
unwillingness to invest in technology 
for which demand is still light, concerns 
about security issues involved in granting 
public access to IT systems, and reluc- 
tance to spend IT dollarson new projects 
in a time when budgets are so tight. 

As a result, most Web services have 
been deployed on corporate intranets. 
There, specific need can be established, 
security concerns contained, and the costs 
of deployment accepted. Web services 
have been rolled out on intranets for two 
primary purposes: data integration and 
componentization of applications. 

DATA IS A DRIVER 

Data integration and aggregation is the 
primary reason behind Web services 
today, said NarsKrishnamachari, director 
of technology for Razorfish I nc, a M ass- 
achusetts-based IT consulting firm. "For 



companies that need to aggregate data 
within the enterprise, Web services and 
XM L are an inexpensive and not terribly 
complex solution for getting data from 
disparate systems and normalizing it." 

At SD Times' Web Services D evelop- 
ment Conference in October of last year, 
it was clear that attendees were exploring 
Web services for just this kind of data 
integration, with an eye toward wider use 
if the pilot projects were successful. 

At this stage, this data integration is 
still straightforward. M ore complex EAI, 
complete with transaction capabilities, 
probably will not happen soon, accord- 
ing to Krishnamachari, because the 
semantics of this are far from being 
ironed out, both at the Web services lay- 
er (as the integration mechanism) and at 
the semantic level. 

In addition, companies that already 
rely on EAI and business-to-business 
integration tools generally have a lot 
invested in this infrastructure— and it 
generally works pretty well. No more 
compelling example of this exists than the 




If it returns a person's entire credit report, it will undoubt- 
edly generate too much traffic and consume excess resources 
marshaling and converting information that the original 
requestor does not need. If the service returns too little infor- 
mation, then the originator will undoubtedly issue follow-up 
requests for data, which equally tie up resources. 

Ideally, the granularity of the data would match the 
requestor's need perfectly — the service delivers all the data 
with nothing extra in a single request-reply cycle. 

Designing a Web service to do this, though, can be difficult 
if the service is set up to handle different kinds of requests 
from multiple clients. Resolution may depend on advances in 
technologies such as UML to make graphical representations 
of Web services and application needs, so that this information 
can be captured in design documents. -Andrew Binstock 



continued widespread reliance on Elec- 
tronic Data Interchange (EDI), which 
was originally seen as the technology most 
likely to be washed away by the flood of 
Web services. 

PIECES OF THE PUZZLE 

During the past 10 years, companies 
have been searching for effective ways to 
reuse existing code. For much of that 
time, initiatives such as object-oriented 
programming (OOP) have provided par- 
tial solutions that were constrained by 
low granularity: Being able to reuse indi- 
vidual objects or classes was hardly the 
big breakthrough companies needed. 
Rather, companies needed a way to reuse 
complex services across multiple applica- 
tions. For example, insurance companies 
use business rules to qualify applicants. 
These rules frequently are hard-coded 
inside the principal underwriting appli- 
cation as hundreds of pages of if-else 
statements. There, they are occasionally 
tweaked and maintained by guru-level 
programmers. The difficulty arises if the 
company wants to requalify its existing 
insureds, for example. Because the rules 
are locked in an application that per- 
forms other functions and generates oth- 
er results, reusing the rules for another 
purpose is practically impossible. 

However, if the rules are extracted 
and wrapped in a Web service, they can 
be used both by the original application 
and by any other software that would 
benefit from running qualification tests. 
Likewise, the actuarial logic that deter- 
mines insurance rates could be wrapped 
as a Web service and used in conjunction 
with the qualification rules to construct 
what-if scenarios for devising new lines 
of coverage. 

These examples illustrate the kind of 

► continued on page 25 
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WEB SERVICES 

- continued from page 23 

robust high-level componentization that 
Web services will increasingly provide. 
In fact, I LOG Inc., a vendor of advanced 
components, is expecting to ship a Web 
services-enabled version of its J Rules 
product to cater to precisely this kind of 
scenario. Henry Bowers, rules product 
manager at I LOG, said, "As this use of 
Web services to componentize business 
services becomes more widespread, 
companieswill be able to mixand match 
these large components from various 
sources and bolt together complex high- 
quality applications in record time." 

And what is particularly compelling 
about this scenario is that it does not 
require the use of standards beyond the 
"four horsemen" (XML, SOAP, WSDL 
and U D D I ) currently employed in Web 
services. That is to say, this kind of com- 
ponent-level integration is simple to 
write and does not require advanced 
coding skills or significant investment 
to implement. 

SO, WHERE TO DEPLOY? 

With most projections suggesting that 
Web services will indeed become an 
integral part of the computing infra- 
structure during the next two to three 
years, many analysts are suggesting that 
IT sites get on board soon. Sites that 
begin working on pilot projects will rec- 



DASHBOARDS AND PORTALS 

A rapidly emerging application of Web services is in dashboards 
and portals. Dashboards are used by companies to graphically 
display metrics derived from a company's operations. For 
example, a firm might create a dashboard available to the man- 
ager of shipping that would show (using gauges and similar wid- 
gets) the number of orders processed, the number of orders 
returned, the average time orders spent in shipping, the inven- 
tory level of shipping supplies and so forth. At a glance, the 
supervisor can see how well operations are performing. 

Web services are a natural solution for this kind of product. 
They can be placed as front ends to a variety of servers and 
then polled for the latest data, which is returned in XML and 
displayed on the dashboard. The fact that the servers may use 
very different data formats and different APIs for accessing 
the data can be resolved by the loose coupling that Web ser- 
vices uniguely provide. 

Companies such as Novato, Calif.-based Corporate Radar, a 
vendor of business intelligence software, use Web services in 
just this way. According to the firm's vice president of sales, 
John Seratt, "We use Web services to present data generated 




by our database analysis software on the dashboards; then we 
give users the option of customizing their dashboards by inte- 
grating publicly accessible Web services that might be of inter- 
est to them." 

Portals are a natural extension of this idea. Through Web ser- 
vices, portals can theoretically access a much larger number of 
data sources and thereby provide a much richer client experi- 
ence. While analysts such as Bob Bickel, of Bickel Advisory Ser- 
vices, maintain that portals are a natural fit for Web services, 
they also view current implementations as just the beginning. 

Evolving standards will lead the way, Bickel contends, to 
more elaborate offerings. "Java's JSR-168 is one effort to help 
standardize how portlets interact with portals. This and other 
standards will help normalize how Web services are aggregat- 
ed on portals. Chances are that portals will daisy-chain Web 
services in a series of functions that ultimately bring consid- 
erable value to the client." 

Among the emerging standards for this integration is Web 
Services for Remote Portals (WSRP), which is under the aegis of 
OASIS (www.oasis-open.org). -Andrew Binstock 



ognizenew usesfor Web services in con- 
texts where security and redundancy can 
be comfortably assured. Then, accord- 
ing to Bob Bickel, former Bluestone 
Software Inc. vice president and 
founder of Bickel Advisory Services, 
they should undertake simple, publicly 
exposed services. These might include 
ways in which customers and clients 
might download an entire product cata- 
log. "You can even create a small client- 
side app that you give to your customers, 



Numerous 
Still Stand 

BY ANDREW BINSTOCK 

Today, Web services are primarily 
deployed on J2EE platforms. All major 
J ava app servers offer some form of sup- 
port for Web services. J2E E 's most sig- 
nificant competitor is M icrosoft's .NET. 
Even though .NET has been shipping 
for only a few months, programmers are 
clearly interested in testing it for Web 
services deployment. In its 2002 survey 
of developers, Evans Data Corp. found 
that the number of developers using 
J ava APIs for Web services and the num- 
ber using .NET were about even. 

In theory, however, the platform 
hosting the Web services should make 
no difference at all. And to the extent 
that this is true today, it is because the 
key vendors of platforms and tools have 
provided sufficiently uniform imple- 
mentations of XM L, SOAP, WSDL and 
U D D I . And because the transport layer 
for Web services is typically H TTP, the 
bedrock of Web services effectively is 
plug-and-play. 

Indeed, Web services could just as 
easily run over other transports such as 
Java M essage Service (JM S) or messag- 
ing middleware. For some sites, these 
alternatives may represent a solution to 
performance and security concerns. 



Challenges 
in the Way 

Beyond the plug-and-play dimensions 
and the simplicity of the protocols lie a 
host of challenges that exponents of Web 
services have to resolve before wide- 
spread adoption can become a reality. 

SECURITY 

Because Web services are a porthole into 
a company's computing infrastructure, 
they represent opportunities for malicious 
hackers to wreak havoc. Today, most pub- 
licly accessible Web services sidestep the 
problem by offering no more functionali- 
ty than what is already available to the 
public through the companies' Web sites. 
Those Web services, such as those from 
Google, Amazon.com and UPS, merely 
automate the Web access through pro- 
grammatic means. 

Because of the security issue, most 
sites are focusing on deploying Web 
services behind the firewall. Even 
there, issues such as access control 
endure. M odification to live data via 
Web services is not widespread, even 
behind firewalls. 

AVAILABILITY 

The scenario turning a rules engine into 
components for use by multiple applica- 

► continued on page 27 



partners, clients as freeware; then have 
it download your catalog and other 
inventory data you're comfortable mak- 
ing public," he said. 

"With Microsoft Office 11 using 
XML and with .NET becoming estab- 
lished," Bickel continued, "the client- 
side front end to your Web service might 
very well be one of your templates run- 
ning on M icrosoft Excel or Word. This 
configuration provides a familiar setting 
in which your customers can immediate- 



ly apply the data they obtain through 
your publicly exposed Web services." 

For sites that are not quite ready to 
go this far, analysts recommend starting 
with the four basic protocols to provide 
dashboards on intranets. These can be 
simple tools that allow managers to 
monitor the status of business systems 
and operations. This is a great place to 
start. F rom there, the componentization 
of in-house appsto leverage key existing 
software modules is a logical next step. I 






Issue Tracking Proce 



sses. 




Ten rax hcidenl Management System 
gives you the power to track bugs, 
cnange requests, custom izations and 
issues n real -time using Web- based 
workflows. 



Elirni nates communication via 
email & spreadsheets 



T*ttti 
tfwctidnge 
COTtrol ttm 

wrth the- t&mml 
IncWmt JAinaieiratnt 

Sn"-crn — I Wni thrSUtd 
raw* 1 product » 
CAflMgurMHfr mid euy u 
instill." 

Choriti C. Worn, 

PjM HtitwafK Mn j<r iir** 



2 hours per week per 
resource 



Is iiieii. for HflrtiporilM Tta 
nwid to cmrrtrsliifl-thmr 



at your fingertips 

integrates with Tenrojc enterprise 

time-tracking system 



For an online demo, contact us at 
www ten rax comrsd'Srnes 
info@tenrox.com 
1 -&77-4TENROX ( t -377-4S 3 -6 769 J 



ncnuwtnur*-., thfl wftmn 
hni mlnlmd -equlr-sneiti, 
wir-Mowr. anc npp-rrv.l - 
flrt-flUtMnarttL" 

An n' Vii n.'f n 
ComftUl ef KaiefJcr 



Tenrox 



|-e = t*rUr*eL-VJiL!HLiJ 3jn**V 




26 



SPECIAL REPORT 



. Software Development Times . February 15, 2003 . 



Connect 

your existing Windows 
Applications to 

Web Services 



NetEdge's Web Service Enabler 

- Connect your Visual Basic 6 
application to XML Web Services. 

- Consume Web services written 
with Java, C++, VB.NET, or C#. 

- Access data from a Web Service 
hosted by Oracle's AppServer, 
IBM's WebSphere, BEA's WebLogic 
or Microsoft ,NET Servers. 

- Reuse and extend existing business 
logic and client code. 

- No .NET Runtime on the client PC. 



NetEdge m 
Software* 

Download a FREE Trial Today! 

tei: 9l9.4e?4294 
i nfo@nelodgesoftwa;e .com 

www, n eted g e s oftwa re . co m 



Web Services Standards: 
Maturing or Fracturing? 




BY STEVEN J. VAUGHAN-NICHOLS 

You can't blame older Web developers if 
they are overwhelmed when considering 
all the new Web services standards on 
their way. For example, in mid-Decem- 
ber 2002, BE A, IBM, Microsoft, RSA, 
SAP and Verisign announced a new set 
of specifications on top of WS-Security: 
WS-Policy, WS-Trust and WS-Secure- 
Conversation. Next, in January, Fujitsu, 
Hitachi, NEC, Oracle, Sonic and Sun 
announced WS-Reliability to try to bring 
rhyme and reason to Web services' 
transport infrastructure. 

You may have noticed, as has Jason 
Bloomberg, senior analyst for Web ser- 
vices and XM L analysis firm ZapThink, 
that "they're entirely different groups 
with no overlap." But 
fear not for standards 
wars, because Bloom- 
berg thinks that while i 
corporate politics are, 
as always, playing a 
role, the real reason 
that two different 
groups of companies produced these 
standards prototypes is that the Web ser- 
vices software vendors are splitting up 
the work among them. 

Bloomberg said, "IBM , for example, 
was working on reliability, but they're 
happy for Sun to do the heavy lifting. 
And as for the new WS-Security initia- 
tive, pretty much all the WS vendors are 
supporting it." Indeed, he explained, 
"the idea behind both group's organiza- 
tion is that for the sake of efficiency, it's 
easier for small groups of companies to 
hammer a standard out and then let the 
WS community review and comment on 
it. Then, after a review period, both will 
probably be released as draft standards." 

Specifically, he expects both to go to 
the Organization for the Advancement 
of Structured Information Standards 
(OASIS) or possiblythe World Wide Web 
Consortium (W3C) to become industry- 
wide standards. 

As for the Web Services I nteroper- 
ability Organization (WS-I), Bloomberg 
commented, "The WS-I 's job is to take 
existing standards and make sure that 
they are applicable. Standards by them- 
selves do no one any good; it's only when 
people use them that they are effective. 
The WS-I comes up with profiles, which 
say this version of WS-Security will work 
together if you follow these rules of 
implementations." 

SECURITY STANDARDS 

WS-Security, hammered out by IBM 
Corp. and M icrosoftCorp. in April 2002, 
is to provide message authentication, 
confidentiality and integrity functions for 



Web services using security tokens, digi- 
tal signatures and encryption. 

With the December announcement, 
IBM and its colleagues are stating how 
you would use WS-Security in en- 
terprise applications. In particular, 
WS-Policy defines application policy 
requirements for authentication, trust 
and encoding. It doesn't go into the fine 
detail of whether one should use L iber- 
ty Alliance or Passport for authentica- 
tion. The same is true of WS-Trust, 
which handles remote site trust and 
authentication issues, and WS-Secure- 
Conversation, which deals with how to 
set up secure messaging sessions. 

But, as Bloomberg noted, these aren't 

standards yet. For now, these are far 

more important to 

A development software 

vendors than to devel- 

^ opersin the field. 

Eric Ogren, senior 

rW~ | analyst for The Yankee 

Group, agreed, saying, 

Z"«_. ■«_ " Tn e w eb services 

security world in 2003 is more hype than 

reality, and we do not expect customer 

deployments to trickle out until late 2004. 

Although it is still too early to determine 

the rate at which commercial enterprises 

will adopt WS-Security, it is clear that 

IBM, Microsoft and the major security 

infrastructure vendors are writing the 

Web services agenda." 

As Ogren also noted, however, the 
companies are promoting "their united 
vision of a Web services world that is 
dependent upon their core technolo- 
gies. The release of the WS-Security 
specifications puts these vendors on the 
inside rail." 

Ogren, unlike Bloomberg, does see 
the lack of support for WS-Security 
specifications by other major Web ser- 
vices players, such as H ewlett-Packard 
and Oracle, as placing those vendors'^ 
length behind," rather than as just a 
matter of different industry groups 
working on their own piece of the WS 
standards puzzle. 

For WS-Security to come together, 
Ogren thinks that the consortium 
behind it must "build end-user Web ser- 
vices applications showcasing the bene- 
fits of WS-Security," submit the WS 
specifications to OASIS and W3C soon- 
er rather than later, and create a broad- 
er alliance of major enterprises and 
enterprise application vendors to sup- 
port WS-Security. 

The IT vendors behind WS-Relia- 
bility are saying that this royalty-free 
specification will promote open, reli- 
able WS messaging standards. In par- 

► continued on page 27 



www.sdtimes.com 



. Software Development Times . February 15, 2003 . 



SPECIAL REPORT 



27 



STANDARDS 



- continued from page 26 

ticular, it's designed to include asyn- 
chronous messaging, guaranteed deliv- 
ery, duplicate message elimination and 
message ordering. 

All of this will be done by adding 
extensions to the Simple Object Access 
Protocol (SOAP) headers and body, 
rather than tying it to the underlying 
transport protocol. While Web services 
can be used over almost any transport 
protocol, WS-Reliability presumes that 
HTTP will be used. 

D on D eutsch, vice president of stan- 
dards strategy and architecture for Ora- 
cle Corp., said, "Open standards-based 



reliability is essential for Web services to 
meet real-world business needs," and 
that "WS-Reliability is an important step 
in defining a solid infrastructure for Web 
services. But, the specification (www 
.sonicsoftware.com/docs/ws_reliability 
.pdf) doesn't address all aspects of reli- 
able messaging." 

What it does do is build on previous 
work with SOAP and the ebXM L M es- 
sage Service. Eventually, the group 
hopes that WS-Reliability will be incor- 
porated into SOAP 1.2. 

Some developers are concerned, 
though, that since guaranteed delivery 
requires an acknowledge (ACK) mes- 
sage from a SOAP node for every suc- 
cessfully received SOAP message, over- 




IT'S A MATTER OF TRUST 

WS-Policy Application policy requirements for authentication, trust 

and encoding. 

WS-Trust Defines application policy for trusting remote sites, 

accepting security tokens and delegating authentication. 

WS-SecureConversation Defines how application negotiation to establish secure 
messaging sessions will be handled by authentication, 
key exchanges and communications encryption. 



WS-Reliability 



Establishes ways to guarantee message ordering, mes- 
sage delivery and the removal of duplicate messages. 



all Web services throughput may be 
slowed down. 

Exact details on how WS-Reliability 
would work are still up in the air. For 
example, it defines elements and attrib- 



CHALLENGES 



4 continued from page 25 

tions introduces a wider problem. In 
that setup, portions of a department's 
application could exist on servers that 
are not under its control. Hence, if a 
needed Web service is located on a serv- 
er that is out of commission, how would 
an application continue running? One 
solution, undoubtedly, is redundancy. If 
a server is down, the Web service auto- 
matically rolls over to a second server. 
However, the details of this process 
need to be worked out carefully, and as 
yet no systematized method has been 
established. 



The problem is more complex than 
just the rollover. F or example, how does 
a requesting application know whether 
a Web service is unavailable? It can ping 
the initial service and receive an 
acknowledgment, but if that service 
relies on a chain of other services, one 
of which is down, it's not clear how this 
event would be recognized, nor how to 
resolve the state issues of the depen- 
dent services in the chain. Within the 
enterprise, of course, monitoring soft- 
ware can provide additional information 
about a server or a device. On remote, 
loosely coupled systems, this will fre- 
quently not be possible. 

Web services provide universal inter- 



operability through the use of numer- 
ous data wrappers. Consider that a sim- 
ple Web service request requires 
WSDL, then processing of the SOAP 
envelope on both ends, XML parsing, 
and the conversion of XM L to the inter- 
nal format used at the endpoints. As a 
result, Web services are noticeably 
slower than their nondistributed, non- 
XM L counterparts. M oreover, for lack 
of substantial deployments, there is still 
little data as to the scalability and per- 
formance under heavy loads. 

Some of the processing overhead will 
diminish as enterprises store more of 
their data in XM L , but this transition is 
happening slowly. I 



utes that might also be used by routing 
or security. The group agrees that such 
elements shouldn't be duplicated across 
multiple SOAP headers, but no way has 
been defined, as of yet, on how such ele- 
ments should be handled. 

Clearly, industry consortia are work- 
ing to make widespread Web services 
deployments enterprise-ready Whether 
these groups are competing with each 
other or simply working on different 
parts of the WS puzzle is an open ques- 
tion. The lack of a clear path for these 
proposalsto move to standards also trou- 
bles some developers. 

What it also points out, though, as 
The Yankee Group observes, is that the 
commercial adoption of Web services is 
still years away. Yes, WS applications can 
be built today, but making them secure 
and reliable enough for enterprise use 
over extranets and the I nternet is still, at 
the least, months and standards away. I 
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EDITORIALS 

Slamming SQL, Sports 

Many software developers think about I nternet traffic 
levels only when their home D SL connection slows 
down. Given the increased prevalence of Web-based 
enterprise applications, however, the entire IT depart- 
ment—and not just the networking staff— needs to be 
aware of the external vulnerabilities inherent in relying 
upon the Internet for critical business applications, as 
well as customer/partner service delivery. 

In late January, two events demonstrated the global 
network's vulnerabilities. First, a new worm, called SQL 
Slammer, was unleashed. Programmed to attack systems 
running M icrosoft's SQL Server 2000, the worm's contin- 
ual transmission of 376-byte packets had the effect of hit- 
ting much of the I nternet with a distributed denial-of-ser- 
vice attack. The traffic flood affected sites as diverse as 
Bank of America, Korea Telecom Freetel, the U.S. 
D epartment of State and Continental Airlines. The result: 
Even if your network wasn't directly affected or attacked 
by the worm, you and your customers experienced a gen- 
eral slowdown of I nternet traffic. 

The second event was Super Bowl XXXVII, the final 
game of the American football season. While Florida's 
Tampa Bay Buccaneers were trouncing California's Oak- 
land Raiders, football fans were pounding the official Web 
site and those of its high-profile advertisers. The conges- 
tion was so intense that Omniture Inc., a Web analytics 
firm, estimated that general Web traffic fell by 22 percent 
during the second half of the game. M eanwhile, advertisers 
such as Universal Pictures and Cadillac saw their Web site 
performance slow to a crawl, according to Keynote Systems 
I nc, with site availability dropping from 100 percent to 83 
percent. (The other 17 percent timed out.) 

While attacks by worms and other malicious programs 
are unavoidable, enterprise Web applications must be 
resilient enough to survive, even if service is temporarily 
lost or impaired. And when it comes to public Web sites, 
the only solution is to test, test, test, to ensure that the 
servers, middleware and infrastructure can support the 
expected load. 

Web Services: Beyond the H ype 

Few software development technologies have been 
promoted as widely as XM L -based Web services, ini- 
tially hyped as a way of reusing software as a rentable ser- 
vice, and then wisely repositioned as an integration technol- 
ogy. Some estimates are that as many as 36 percent of all 
corporate developers are working on Web services— and 
that 25 percent have actually deployed them. 

That doesn't mean that Web services are ready for 
widespread deployment, despite what the leading plat- 
form providers claim. Concerns about security, availabili- 
ty and interoperability remain. While vendors are busy 
developing specifications for addressing these issues, such 
as the new WS-Policy, WS-Trust, WS-SecureConversa- 
tion and WS-Reliability, the mere presence of specifica- 
tions doesn't translate into a deployable solution. 

A wise strategy, for now, would be to stick with Web 
services projects that leverage the four core Web services 
standards- XML, SOAP, WSDL and UDDI-and wait 
for these new specifications to mature under the auspices 
of genuine standards bodies, not vendor consortia, i 
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THE BENEFITS OF ACCESSIBLE DESIGN 



v. 



As a Web designer, I Ve seen a 
lot of changes in the past 
few years on the Internet. A 
standardization has developed 
for what a Web site is expected 
to have and what it shouldn't 
have. H owever, part of my job is 
not only to design pages that 
meet the current standard, but 
to look ahead and try to 
see what standards may 
be developing. I think 
the next big change well 
see in Web design will 
center around building 
sites for accessibility. 

Right now only feder- 
al agencies are required 
to design their sites to 
meet accessibility guidelines, 
under the Rehabilitation Act of 
1973. Section 508 of this act, 
which passed in 1998, mandat- 
ed that all federal sites had to 
be accessible to all people. Can 
the day be far behind when the 
rest of us are required to do the 
same? 

While it may seem like a 
daunting task, redesigning your 
site for accessibility makes it 
better. It doesn't only help visi- 
tors who have physical, sensory, 
cognitive or work-related con- 
straints. Users with older hard- 
ware, older browsers or text 
browsers, or those who have 
their computers set to view text- 
only to improve I nternet down- 
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load time also benefit. The site's 
information is faster to find and 
the site is more appealing. 

The World Wide Web Con- 
sortium (W3C) has put forth a 
list of suggestions for Web 
designers to follow to fully opti- 
mize sites for accessibility: 

Guideline 1: Provide Equiv- 
alent Alternative to 
Auditory and Visual 

Content. Not all users 
on the Web can make 
use of images, multime- 
dia and audio. So con- 
tent developers must 
supplement page ele- 
ments with "equivalent" 
information. This is 
done using alt tags on all images. 
Since the alt tag containstext, it 
can be accessible to user agents, 
such as synthesized speech, 
Braille and visually displayed 
text. The benefit is that adding 
alt tags also helps with search- 
engine optimization. 

Guideline 2: Don't Rely on 

Color Alone. Pages need to 
have sufficient contrasting colors 
so that users with monochrome, 
black-and-white displays, and 
people with color-viewing dis- 
abilities can view information. 
For large amounts of readable 
content, use a white background 
with black text for a highly read- 
able contrast. A good test to 
ensure pages have enough con- 



trast is to print them out in black 
and white from a screen print 
and make sure you can still read 
the detail. 

Guideline 3: Use Markup 
and Stylesheets and Do It 
Properly. There are many 
advantages to using stylesheets. 
A Web site utilizing a Cascading 
Style Sheet uses only one CSS 
file to apply all the styles/for- 
matting for text, paragraphs, 
images, margins, padding, list 
and colors to numerous pages. 
This means that making overall 
style changes to a 200-page site 
can be made by just changing 
one attribute on one stylesheet. 

The correct use of a style- 
sheet is to include the color hex 
number rather than color name. 
Content developers should 
always specify "fall back" fonts to 
ensure that if the font that is list- 
ed is not available on the user's 
computer, it will have another 
font listed as a default. 

Guideline 4: Clarify Nat- 
ural Language Usage. Devel- 
opers need to identify foreign 
language changes within the 
content so that users with dis- 
abilities can have this content 
translated appropriately. The pri- 
mary language should be identi- 
fied in the header tag and abbre- 
viations, and acronyms should 
also have the correct markup so 
that they will translate properly. 



LETTERS TO THE EDITOR 



PROTO PROMOTION 

I am disappointed that proto- 
specifications (technically in- 
complete) such asWS-Transac- 
tion and WS-Coordination get 
so much attention ["Web Ser- 
vices Momentum Continues," 
Jan. 1, page 1, or at www 
.sdtimes.com/news/069/story3 
.htm] when there is an already 
agreed upon, usable specifica- 
tion available from OASIS that 
does the same thing. Promotion 
by the I BM /M icrosoft duopoly 
seems to be the only thing that 
matters in Web services. 
William Z. Pope 

HUSKERS AT THE FORE 

You report that Purdue estab- 
lished the first computer science 
degree program around 1968 
["The Year That Was: 2002- 
Passing," Jan. 1, page 22, or at 
www.sdtimes.com/news/069 
/speciall.htm]. I graduated from 
high school in 1967 and started 
electrical engineering at the U ni- 



versity of Nebraska. In 1968 I 
switched majors to computer 
science, graduating with that 
degree in 1971. 

They granted master's de- 
grees at that timeas well (which 
I got also). Ph.D .'s were added 
a few years later. At the time I 
entered the program, it was 
already fully established with its 
own dedicated staff and build- 
ing. I don't know when it was 
formed, but I believe it was a 
couple of years before me. You 
may want to check with the 
University of Nebraska com- 
puter science department. I 
wasn't under the impression 
that we were the first to offer a 
full program, but we were cer- 
tainly among the first. 

Steve Jones 

Vice President, E ngineering 

PointBase Inc. 

VISUAL FOXPRO A HIDDEN GEM 

Regarding Oliver Rist's column 
in the Jan. 1 issue ["There's 



M ore to Life Than SQL Server 
2000," page 27, or at www 
.sdtimes.com/cols/winwatch_069 
.htm], there's a M icrosoft data- 
base that simply wasn't men- 
tioned—Visual FoxPro. 

Please take a look at the latest 
beta for VFP located at http: 
//msdn. microsoft.com/vfoxpro. 
Visual FoxPro is M icrosoft's hid- 
den gem. As M icrosoft states, 
Visual FoxPro is compatible with 
.NET and doesn't have the dis- 
turbing runtime licensing issues. 

Bill Anderson 

Editor's note: Mr. Anderson 
is president of the Los Angeles 
County FoxPro Developers 
Group. 

In the January issue of SD 
Times, Oliver Rist states: "On 
the downside, MSDE has no 
native front end of its own— use 
either Access, SQL Server or 
Visual Studio to build one." 

Really? When did SQL Serv- 
er come with a front end? If you 
have SQL Server (any version), 
you either make your own front 
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Guideline 5: Create Tables 
That Transform Gracefully. 

Unless tables are properly 
marked up, accessibility agents 
cannot correctly read HTML 
tables. The solution is to provide 
checkpoints in the coding tables 
for improved accessibility. This 
code also helps with search- 
engine optimization. 

To aid accessibility in tables, 
make use of the summary attri- 
bute placed within the table tag. 
This attribute clarifies the pur- 
pose of the table and describes 
the table's content. Columns and 
rows are given identifiers within 
their tags so that user agents can 
recognize the table's content and 
index the content in a compre- 
hensible order. 

Guideline 6: Ensure That 
Pages Featuring New Tech- 
nologies Transform Graceful- 
ly. Having a page that utilizes 
new technologies and displays 
correctly in all browsers has al- 
ways been a problem. To make 
your site accessible, all the pages 
need to render in older browsers 
or for users with scripting fea- 
tures turned off. H ow can this be 
done? The answer is to provide 
alternative accessible pages or 
ensure that the event handlers 
are input device independent. 
Web pages that utilize frames 
should use the "NOFRAMES" 
tag at the end of the frame set, 
and pages should be developed 
so that they will render readable 
even when stylesheets are not 
utilized by older browsers. 



Guideline 7: Ensure User 
Control of Time-Sensitive 

Content. U sers need to be able 
to control animated text. M any 
times users with accessibility 
issues cannot read rapidly mov- 
ing text, nor can screen readers 
render animated text. So con- 
tent developers should place 
controls on the page that allow 
the user to pause the animations 
and provide alternative means to 
display the information. It's also 
important to avoid using blink- 
ing text so as not to trigger 
seizures. 

Guideline 8: Ensure Direct 
Accessibility of Embedded 
User Interfaces. M any Web 

page objects like F lash or Java 
applets have their own interface 
and therefore are not readily 
accessi ble for those using acces- 
sibility agents. These objects 
aren't controlled by HTML, 
therefore accessibility must be 
built into the objects or another 
way must be found to display 
the same information. 

Guideline 9: Design for 
Device Independence. All 

Web-page elements must be 
accessible by means of a variety 
of input devices, such as the 
user's mouse or keyboard short- 
cut. Scripts should specify logi- 
cal event handlers, but this may 
be difficult if you are waiting for 
the user to select something. If 
logical handlers cannot be used, 
then two device input event 
handlers can be used, such as 
"onKeydown"and "onClick." 



Guideline 10: Use Interim 

Solutions. It's important for 
assistive solutions and older 
browsers to work together. One 
of the things I love about this 
guideline isthat one of itscheck- 
points regulates the opening of 
new windows without informing 
the user. This would mean the 
end of uncontrollable pop-up 
windows! This guideline also 
covers the positioning, naming 
and placement of form field 
descriptions inside label tags. 
F orm labels should precede the 
form element they describe, and 
form elements should utilize tab 
indexing so users can navigate 
through the form without the 
assistance of a mouse. 

Guideline 11: Use W3C 
Technologies and Guidelines. 

Outside of the W3C guidelines 
for accessibility, there are a num- 
ber of other generic guidelines 
theW3C (www.w3.org) suggests 
for Web site design. By using the 
technologies and guidelines it 
specifies, all sites will become 
clearer and easier to use. 

Guideline 12: Provide Con- 
text and Orientation Infor- 
mation. Content developers 
need to provide information and 
orientation on grouped elements 
such as navigational elements 
and content in tables. This can 
be done by providing a structur- 
al orientation of information 
within the page's content, to help 
users in accessing information 
efficiently and comprehensively 
and to aid in navigation. 



Guideline 13: Provide Clear 
Navigation Mechanisms. Web 

sites should use text links that 
easily and efficiently describe 
where a user is going when he or 
she clicks. Alt tags need to be uti- 
lized when a graphic is used to 
navigate. Title attributes need to 
be linked with text links to clari- 
fy destinations. For larger sites, it 
is important to provide a page 
that has the site's layout struc- 
ture, such as a site map and/or 
site- searching functionality. 

Having clear navigation also 
helps with search-engine opti- 
mization, because the spiders 
have a clear path to follow and 
the alt tags provide another 
opportunity to convey key words 
related to the linked page. 

Guideline 14: Ensure That 
Documents Are Clear and 

Simple. Use a consistent page 
layout, graphics that are recog- 
nizable and content that is writ- 
ten clearly and concisely, and 
avoid tricky interfaces and 
wording. 

For additional information 
about Web accessibility, I sug- 
gest visiting the HTM L Writers 
Guild's AWARE Center at 
http://aware.hwg.org. AWARE 's 
(Accessible Web Authoring 
Resources and Education) 
mission is to serve as a central 
resource for Web authors 
who want to learn about Web 
accessibility. I 

Mart/ Elges is a Web designer at 
Pinnacle Decision Systems Inc. 



end from Access or VB or C++ 
or some other 3GL or 4GL, or 
you never put data into SQL 
Server. E nd of story! There is no 
front end to SQL Server— never 
has been, never will be— accord- 
ing to the Washington Weenies. 

Their point of view is, after 
all, cash. Why would they give 
you something for free, when 
you can easily buy it? Along 
with the goofy SQ L Server pric- 
ing, I'm waiting for the SQL 
Server version in which the cost 
is determined on a "per-transac- 
tion" basis. Ahh, now that's the 
life of a never-ending cash flow! 

Jeff Schwartz 

'STANDARDS' SHOW SEAMS 

I have a different view with 
respect to Andrew Binstock's 
column ["IBM Continues Dis- 
turbing Trends," J an. 1, page 29, 
or at www.sdtimes.com/cols 
/middlewatch_069.htm]. Soft- 
ware tools, databases, group- 
ware and the other multitude of 
tools "hooked" into an app serv- 
er don't necessarily have to be a 



part of the J 2EE implementa- 
tion to be standardized. 

First of all, most of these 
tools were here long before the 
application server. These tools 
were developed to be propri- 
etary. Today, however, the fla- 
vor of the day is standards— it 
almost has to be in the open 
world of Web services, where 
implementations won't be pro- 
tected from corporate LANs or 
firewalls. TakeBPEL4WS. For- 
tunately, IBM, Microsoft and 
B E A were able to come togeth- 
er to make this happen— so far. 

Second, if you tried to pick 
best-of-breed tools, and mix and 
match app server to tool set to 
database to message queuing 
implementation, your IT shop 
was in for a nasty job to make 
these different products intemp- 
erate. H as anyone tried publish- 
ing an EJ B developed with J D e- 
veloper onto WebSphere, or an 
EJB developed with VisualAge 
onto an Oracle AS? This is the 
main reason why customers still 
choose to buy a total vendor 



solution— the very same cus- 
tomers who beg to purchase 
standards-based software. Capri- 
cious, isn't it? 

My point is that all J2EE 
implementations have tough 
times seamlessly integrating the 
pieces of the technology even 
though they are based on stan- 
dards. This isn't a trend— it's 
the norm, and IBM certainly 
isn't setting this trend. 

Finally, if the effort to stan- 
dardize continues, I believe that 
secondary tools will be based on 
open standards as well, again 
not necessarily a J 2EE standard. 
You see this today with IBM 's 
WSAD — which, as Binstock 
mentions, is based on Eclipse. 
Tools, databases, voice-enabled 
apps or whatever may not nec- 
essarily be standardized within a 
J2EE implementation, but they 
will be standards of their own- 
as is BPEL4WS, because cus- 
tomers are demanding it. 

Cem Fuller 

Software Developer 
M inute M aid Inc. 



MICROSOFT 'COERCION' 

I n response to M r. Vaughan- 
Nichois' column ["Bench- 
marks in the M iddle," D ec. 15, 
2002, page 22, or at www 
.sdtimes.com/cols/javawatch_068 
.htm], although .NET use is 
minimal today, M icrosoft no 
doubt has the will, and cer- 
tainly the leverage, to "artifi- 
cially" expand the .NET devel- 
oper base, using techniques of 
coercion that it has applied in 
various areas. 

That's my only reservation 
about your article, which I 
found to be articulate, interest- 
ing and pertinent. 

David Moffat 

Student I nformation Services 

UNC-Chapel Hill 

Letters to SD Times should include the 
writer's name, company affiliation and 
contact information. Letters become the 
property of BZ Media and may be edited. 
Send to feedback@bzmedia.com, or fax 
to +1-516-922-1822. Please mark all cor- 
respondence as Letters to the Editor. 
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Xtreme Simplicity's 
Cff Refactory and 
JetBrains' IntelliJ IDEA 



Code refactoring tools target .NET, Java platforms 

first release and consider it essential to 
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BY LARRY O'BRIEN 

I f there is any programmer who doubts 
that naming is vital to thought, look no 
further than Martin Fowler's 1999 
landmark book "Refactoring." There 
had been virtually no prior discussion 
in print of the techniques by which 
pieces of functioning code are incre- 
mentally changed and, one hopes, im- 
proved. I n a profession where "iterative 
and incremental" is one of a very small 
number of universally accepted veri- 
ties, it seems incredible in retrospect 
that there had been a vast silence about 
the specific techniques of manipulating 
existing code. 

While refactoring can be done by 
hand, it tends to be tedious and error- 
prone. A few new tools, though, make 
the process of clean refactorings (al- 
most) as simple as cut-and-paste. 

Xtreme Simplicity'sC#Refactoryisa 
plug-in for Visual Studio.NET. I looked 
at the 1.05 release, as well as the 1.2 
beta. Installation is trivial— download 
an installer file, read and click a license 
agreement, and you're done. C# Refac- 
tory installs a new cascading menu item 
in the Visual Studio .NET "Edit" menu 
and in the context menu that appears 
when you right-click on code. The tool 
implements the most common refactor- 
ings— renaming variables, methods and 
classes, and the most important "extrac- 
tion" refactorings, such as converting a 
block of code into its own method or 
moving certain fields and methods into 
a new superclass. These extractions are 
the fundamental tool in the battle 
against cut-and-paste: C# Refactory 
makes it easier to do the right thing than 
the wrong thing. 

To extract a method, for instance, 
one highlights the code of interest, in- 
vokes a context menu, and faces a quick 
dialog to name the new method and re- 
name parameters as appropriate. I n the 
unnoticeable time before the dialog 
comes up, C#Refactory parses the high- 
lighted code and determines which vari- 
ables within it must become parameters 
to the new method, which must be ref- 
erences or should serve as the return 
value, and which variables can be local 
to the new method. C# Refactory cre- 
ates the new method and inserts the call 
to it. It's clean, simple and fast. 

J etB rains I nc.'s IntelliJ IDEA started 
as a tool for refactoring but has evolved 
into what I believe is simply the best 
Java development environment avail- 
able. Currently in its third release, it's 
the type of product one grows fanatical 
about: I've been using IDEA since its 



myj ava development. 1 1 blowsthe doors 
off any other IDE for straight JDK 
work, although it does not have form- 
building tools or the Enterprise Java- 
Beans-specific wizards of, say, J Builder. 
A native J ava application, IDEA is easily 
configured to run with different J DKs 
and has built-in support for such tools as 
Ant, CVS, Glue and jUnit. It supports 
J2EE development, including EJBsand 
JavaServer Pages tag libraries. 

IDEA supports more than 20 refac- 
torings directly and includes other 
commands that could be viewed as 
refactoring, such as optimizing import 
statements. Refactorings range from 
the essential renaming and extraction 
abilities to more sophisticated func- 
tions, such as "Replace constructor 
with F actory method" and "Replace in- 
heritance with delegation." 

IDEA is trustworthy. On my last J ava 
project, our client asked us three-quar- 
ters of the way through the project if it 
were possible to modify the error-han- 
dling strategy dramatically (from inter- 
nal to external). This touched every sin- 
gle use-case in the system. This is the 
type of task— spanning dozens of pack- 
ages, modifying classes one didn't write 
and hasn't studied, jumping up and 
down abstraction levels— that can cause 
enormous trouble if every step is not 
done thoroughly and consistently. 

"I ntention Actions" is a unique fea- 
ture that is somewhat startling. Occa- 
sionally, while coding, a light bulb trig- 
gering a drop-down list will pop up be- 
side the current line (similar in 
appearance to the "Smart Tags" in Of- 
fice XP). The contents of the drop- 
down list contain a context-aware 
guess of what you intend to do. Type 
"foo" on a blank line in a method, and 
I D E A might offer to generate the code 
to "Create field 'foo'" or "Create local 
variable 'foo.'" 

Refactoring is the code-centric 
process of improving the design of ex- 
isting code and accounts for a large part 
of the professional programmer's work- 
ing day. .NET programmers can get a 
sense of the power that a refactoring 
tool can provide via C# Refactory, but 
Java programmers can have in IDEA 
the finest tool for writing (and rewrit- 
ing) code available on any platform. I 

Larry O'Brien, a frequent contributor 
to SD Times, is an independent tech- 
nology consultant and analyst, and the 
founding editor of Software Develop- 
ment Magazine. 
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THE WINDOWS-ONLY TWO-STEP 



In the predawn of its latest operating- 
system release, M icrosoft is setting the 
tone for 2003— lots of new software 
releases. And a big factor in all these 
upcoming releases is M icrosoft's perspec- 
tive on XML. The question is whether 
this XM L perspective is based in reality 
or in more of that nebulous vapor known 
to envelop much of the N orthwest. 

M icrosoft is sure trying to do away 
with any vapor taint. Recently, the 
company churned out three new tools 
to help developers better exploit XM L . 
The first is XSD Schema Validator, 
which allows programmers to verify 
the validity of their schemas or check 
on the configuration of an XM L docu- 
ment against W3C standards. XML 
Diff and Patch is the second tool, 
enabling developers to pinpoint the 
differences between two XML files 
and then fix the original XM L file with 
the changes made in the other. The 
third is XSD Inference 1.0, which cre- 
ates an XSD schema along with an 
XML instance document. This allows 
developers to almost auto-create an 
XSD schema from a source document 
with the ability to refine that schema in 
the future. 

In addition, the boys from Redmond, 
notably Don Box, a M icrosoft .NET soft- 
ware architect speaking at December's 



Baltimore-based XML Conference & 
Exhibition, have dropped some tantaliz- 
ing tidbits about upcoming M icrosoft 
XM L releases, including an XM L -capable 
version of Office and a new XM L devel- 
opment language that Northwestern 
rumormongers have dubbed X#. X# is 
supposed to ease the task of XM L schema 
definition by providing embedded sup- 
port for this function within the language. 
Again, however, M icrosoft main- 
tains that any mention of X# is 
based entirely on hearsay and the 
company has no official position 
on the topic. 

Beyond rumors, the real 
M icrosoft XML news has been 
XDocs, a new XML editing 
prototype technology that may 
or may not become the new 
productivity suite paradigm in some 
future version of Office. M icrosoft has 
already placed new XM L capabilities 
into Office 11, previously discussed in 
these pages, intended to allow users to 
access corporate data stores via their 
Excel and Word applications, thus 
paving the way for the concept of 
Office as a corporate data viewer as 
well as productivity tool. 

While the security implications of 
wiring Office directly into my corpo- 
rate data store still make me shudder, 
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the future implication of being able to 
directly manipulate productivity data 
in XM L via XDocs does have numer- 
ous benefits for users as well as devel- 
opers. Some of these have been real- 
ized by the open-source community 
with suites such as Open Office, whose 
native format is based on XML. But 
these implementations are mostly lim- 
ited to layout-style descriptives rather 
than any intelligence about the docu- 
ment's contents. As it's laid out today, 
XDocs should easily take a step beyond 
such tools by providing direct 
and even dynamic intelligence 
about document content and 
data type. 

That's because XDocs may 
end up replacing or largely sup- 
planting traditional Office appli- 
cations. Users will still create 
documents via methods familiar 
to them, but they will be able to 
specify document- or content-specific 
XML schemas. Sounds great, but I'm 
reserving judgment until I see a final 
version of XDocsin action. Being ableto 
specify tag functions and schema defini- 
tions easily while still being able to han- 
dle presentation problems in a WYSI- 
WYG-style user interface would indeed 
be a boon for developers. But I still don't 
see it being that popular with run-of- 
the-mill users. 

But that's just my lack of faith in 
Microsoft's GUI designers. Allowing 



XDocs to develop a single user inter- 
face for the creation of any document 
type, and encapsulating all that docu- 
ment data within XM L would conceiv- 
ably allow Redmond to move such a 
document between user interfaces of 
varying intelligence and complexity. In 
other words, we wouldn't necessarily be 
stuck with a single XDocs interface, but 
could have several such interfaces 
designed with the needs of different 
users in mind, yet imbued with the abil- 
ity to transfer XDocs-based documents 
between them seamlessly. 

Regardless of personal doubts, 
XDocs is certainly an exciting concept, 
both for the future of XM L as well as 
Web services— right up until you run 
into the ".N ET-only" barrier. 

That's right: As it stands today, 
M icrosoft has indicated that XDocs will 
be usable only on systems running 
.NET, which at the moment, still means 
Windows. While XDocs is definitely a 
more ambitious step than any being 
implemented by either the W3C or 
open source at this time— and certainly 
implies a paradigm shift in the produc- 
tivity suite market— offering it on a 
.N ET-only platform is enough of a lim- 
itation to prevent the technology from 
becoming a market standard. I 

Oliver Rist is a freelance technology 
journalist and president ofFB2 Corp., a 
New York-based software manufacturer. 
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WEB SERVICES STANDARDS GET MESSIER 



Let me get this straight. I n one corner, 
we have BE A, IBM , M icrosoft, RSA, 
SAP and Verisign announcing a trio 
of new security standards riding on WS- 
Security: WS-Trust, WS-Policy and 
WS-SecureConversation. In the other 
corner, weighing in at over a trillion in 
net worth, we have Fujitsu, Hitachi, 
NEC, Oracle, Sonic and Sun pushing 
WS-Reliability to bring some sense to 
message reliability. 

I s there something missing here? n 
the security side, we have all these 
major players, except Oracle and Sun, 
and on the reliability front, we've got a 
lot of heavyweights, except M icrosoft 
and IBM . Now, as I report in "Web Ser- 
vices Standards: Maturing or Fractur- 
ing?" (page 26), some analysts, like 
Jason Bloomberg of ZapThink, think 
that it will all work out in the end. M ore 
than that, Bloomberg seems to believe 
that the companies divided up the work 
so that the overall standardization of 
Web services happens sooner rather 
than later. 

M aybe some of the engi neers honest- 
ly believe that all programmers and 
developers should be working together 
to create open systems and standards for 
everyone's benefit. I can buy that. I 've 
known people in the business that really 
do operate that way. 

But based on what I've seen in my 
decades now of watching the technology 
companies work and play with each oth- 



er, I don't believe for a second that these 
consortiums are going to do the right 
thing. No, they'll end up wrestling in the 
dirt and making a muck of Web services. 

I don't know about you, but I find it 
very helpful to think of technology com- 
panies as being a lot like fifth-grade 
boys: The big ones rule, the smaller ones 
follow, and there's always a lot of fighting 
and name-calling. I can't see it being any 
different in the Web standards 
playground. 

The name of the game for 
the big vendors ultimately is 
King of the H ill. Whoever ends 
up on top of the hill with a pop- 
ular standard first wins. Don't 
believe me? Well, just sit back in 
your La-Z-Boy and watch your 
Betamax release of "The Fel- 
lowship of the Ring," while I talk to 
everyone else. 

What will make this game even more 
of a mud bath than usual is that Web 
standards don't just need one standard, 
they need about a dozen. And, last but 
not least, there's no bewildered referee 
to declare a winner. 

Who decides what's a real Web stan- 
dard? The IEEE isn't it, and I'm sure 
some of its members are extremely glad 
that they're not involved with this mess. 
The IETF has enough problems. 
E C M A? M aybe it should be, but it's not. 
The W3C is sort of, kind of, part of the 
standardizing solution for Web stan- 
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dards, but most of the vendors I know 
don't like them. OASIS will be playing a 
large role. 

I had thought that the WS-I was 
going to be the be-all and end-all of Web 
services standardization efforts once Sun 
was finally in, but its mission seemstobe 
to make sure implementations of Web 
standards work together rather than 
making sure the standards edges fit 
together in the first place. 

So who will decide who wins? Who 
decides which proposed standard 
becomes a real standard, and— 
the all-important part in soft- 
ware development— how these 
standards will work together? 

In the long run, yes, open 
standards that everyone agrees 
on will make everyone richer. 
J ust a brief look at the history of 
technology shows that it's when 
everyone finally agrees on how 



to run things that people start to really 
make money. And, despite the often illu- 
sionary riches of the 1990s, we never 
made it to that point in software. 

But, with M icrosoft and Sun going at 
each other hammer and tong in the 
courts, and no one trusting Ralph Elli- 
son either at the America's Cup race in 
New Zealand or in business, I don't see 
Web services standardization coming 
anytime soon. 

I don't know when we will have a good 
open answer to software development, 
but I have a bad feeling that Web services 
won't be where it will happen. Worse, 
Web services are going to be deployed in 



a piecemeal, ad hoc kind of way. 

Remember the bad days of the 
browser wars? There were many pages 
that simply wouldn't work— period, end 
of statement— with some browsers. 
That's where we're going. We'll have 
Web services "standard" enterprise 
servers that won't work with Web ser- 
vices "standard" IDEs that won't work 
with Web services "standard" middle- 
ware and so on. 

Only it will be worse. At least in the 
awful days of incompatible ORBs, you 
could usually figure out which pieces 
from which vendors would work togeth- 
er. With Web services, there are just so 
many different pieces, the only safe 
thing for developers to do will be to stay 
with one vendor. 

That means trouble, real trouble, for 
the Java companies. Unless the Java 
powers coordinate their Web services 
standardization efforts, we'll end up with 
the same kind of trouble we already 
have getting Java programs from differ- 
ent companies working together. 

And when I think about that some- 
times, I look at M icrosoft and .NET and 
think that, even though the boys from 
Redmond are in a heap of legal trouble, 
they may still end up king of the hill— 
unless the Java companies start playing 
with each other, instead of against each 
other. I 

Steven ]. Vaughan-Nichols is editor of 
Practical Technology (www.practical- 
tech.com) and has worked as a program- 
mer for NASA and the Dept. of Defense. 



IT'S NOT EASY HANDLING MOBILITY 



What's the next big thing? Mobility. 
The next two years will see a greater 
focus on mobile workers. These employ- 
ees will have in common only the salient 
trait of being intermittently connected to 
the Internet. Otherwise, their hardware, 
their software and their needs span a 
frustratingly wide gamut encompassing 
all of today's hardware/software systems 
as well as others not yet available. 

Because of this variety, analysts are 
finding it difficult to know what exactly 
to recommend to sites in preparation for 
thisforthcoming development. Consider 
for example, the issue of the hardware at 
the client end point. Nearly all possible 
options are currently undergoing accel- 
erated evolution. And in almost all cases, 
that evolution is tending toward product 
convergence. The convergence of hand- 
held computers and smart phones is the 
most well known; it will ultimately 
expand to include the current BlackBer- 
ry functionality, which spans both prod- 
uct categories. 

H igher up the market— and on a most 
precarious perch— are the handheld PCs, 
those laptop-like devices that use Win- 
dows C E . Above them are laptops, which 
have traditionally observed a distinctly 
marked DMZ between themselves and 



desktop systems. The key differentiators 
in this separation were processing power 
and its twin cousin power consumption; 
notebooks offered lesser performance 
because they consumed less power. 

Recently though, due to the favorable 
pricing of Pentium 4 processors, these 
desktop chips have been finding their way 
into notebooks, thereby creating 
more powerful, power-hungry 
laptops. These devices, some- 
times called "desknotes," outsold 
traditional notebooks during the 
2002 holiday season, and new 
robust models from HP and 
Toshiba are furthering the trend. 
The only thing that now distin- 
guishes portables from desktops 
is weight, form factor and the key ele- 
ment: the fact that only the desktop boxes 
are constantly connected. 

Separate from these devices are tablet 
PCs, whose actual presence beyond the 
recent hype has yet to be established, 
although they will undeniably become 
important client devices soon. 

This remarkable variety of devices 
means user interfaces cannot be 
designed uniformly for all devices 
because form factor differences are so 
great. Likewise, processing power dif- 
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fers so much that applications might 
have to be substantially redesigned for 
different platforms (consider M icrosoft's 
Pocket Excel, for example). 

I ndeed, I SVs will be obliged to write 
multiple versions of their products. 
Shipping the same software for multiple 
client devices will increasingly become a 
suboptimal design. And vendors who do 
not respect these differences will soon 
find their products passed over by pur- 
chasing managers. 




WHAT TO DO? 

Of the numerous changes to 
consider, the most important is 
the effect of occasional connec- 
tivity on applications. In other 
words, how to write software 
that no longer assumes constant 
connectivity. This change has 
important implications. 

First of all, security. If applications 
require sign-on, you cannot assume that 
a directory will be available on the net- 
work to validate user credentials. 
Authentication and authorization need 
to rely on encrypted data on the local 
machine. For some applications, this 
might not be strictly possible. In such a 
case, designers should consider allowing 
the user to continue working and then 
enforce the authentication when the 
user reconnects with the network- 



before any updates are made or any data 
is transferred to the hosted applications. 
However, blocking users from working 
because they're not connected will be a 
mortal sin. It's close to being one now. 

This approach of a pro-tern ability to 
go forward while not connected should 
become the norm. D evelopers must learn 
to queue transactional data and process it 
asynchronously at reconnect. This means 
that work must be allowed to continue 
even if transactions are pending. Offline 
processing of e-mail is the canonical 
example of this. A common way to handle 
this requirement is through the use of 
messaging middleware. M essages are 
dropped into queues, and the middleware 
handles queue processing (with the atten- 
dant security issues) at reconnect. 

N ote that server-side programs must 
use the same paradigm. They need to 
handle queued transactions and know 
how to provide for sudden client discon- 
nects without corrupting data or transac- 
tional integrity. 

There are many other issues that 
intermittently connected clients impose 
on software design, and surprisingly, 
middleware provides effective solutions 
for many of them. We will discuss addi- 
tional issues and solutions next issue. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 
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BENEATH THE BUBBLE 



When Ray Lane was Oracle's presi- 
dent and chief operating officer, 
the company's tag line was "The Internet 
Changes Everything." Now a partner at 
Silicon Valley venture behemoth Kleiner 
Perkins Caufield & Byers, Lane was in 
New York last month at a breakfast 
meeting sponsored by data integration 
solution provider M etaM atrix (in which 
Kleiner Perkins is an investor) to declare 
that the Internet has in fact 
changed many things. Yet he 
believes the industry only has 
scratched the surface of what 
the Web can become. 

M uch has evolved in the 400 
or so weeks since the introduc- 
tion of Netscape. People have 
access to more information than 
they've ever had before— even if 
much of it involves mortgage refinancing 
or stashing the funds of some fugitive 
African official. And, that access is just 
about immediate. These two simple facts, 
said Lane, have forever changed the way 
companies do business, giving customers 
more power than ever before and forcing 
businesses to reassess their relationships 
with those customers and with their trad- 
ing partners. The dot-net bubble can be 
seen as the point in time at which the 
game of business was irrevocably altered. 

Before the Internet, businesses in 
many cases did not take an enterprisewide 
view of their technology infrastructure. If 
sales needed data, a sales database was 
created. If manufacturing and warehous- 
ing needed data, they were given data- 
bases. If a business partner needed infor- 
mation, he was given yet another way to 
reach the company. U nfortunately, no one 
had the vision at the time to link these up. 

Now, it again falls to the technology 
departments to lift corporations and 
organizations out of the mess that the 
same technology departments got them 
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into. Again, businesses are being asked 
to have blind faith that the next solution 
is the correct one. That's a lot to ask for, 
considering it was IT that convinced the 
corporate bosses to install hugely expen- 
sive SAP or Oracle systems that created 
these data silos in the first place. 

Yet Lane believes that technology, if 
used the right way, can help businesses 
reduce costs and latency. He made the 
point that knowing what we 
know now, if he were starting a 
business today, he could do it for 
30 percent less cost than it takes 
to run the business now. 

The challenge, of course, is 
taking a business with thousands 
of databases and even more 
thousands of applications and 
getting them to run in a way that 
makes the business always on, adaptive 
and collaborative. 

The business process "customer wants 
to place an order" is a very complex one and 
touches upon multiple underlying systems. 
That's why Lane said ERP systems are so 
expensive to install and maintain. Business- 
es need to streamline that, to make the 
process more efficient, to make it able to 
adapt to changes, and to sync up with sales- 
men in the field, inventory tracking and 
suppliers in a secure way. 

But, having spent tens or even hun- 
dreds of millions of dollars on an ERP 
system, it's not likely that a business is 
going to rip one out. Therefore, Lane 
said, whatever comes down the pike for 
what is being called enterprise informa- 
tion integration will happen at a layer on 
top of the ERP stack and not within it. 

In Lane's view, the IT architecture of 
the future is an upside-down presenta- 
tion of today's enterprise architectures, 
with the ERP stack at the bottom, a lay- 
er for metadata models sitting above 
that, then a layer for developers to cre- 



ate apps to the metadata layer without 
worrying about the underlying systems, 
and then at the top, a layer where busi- 
ness analysts can create Web services 
and federated applications for the end 
user. Ultimately, Lane projected, the 
end users themselves will be able to cre- 
ate programs for themselves. 

Lane and other believers in metadata 
modeling say there is a religious war 
being fought between data architects and 
programmers. "The solution is to take 
this decision out of the developers' 
hands," L ane said. "I t's a high-level man- 
agement issue. Programmers are stand- 
ing in the way of implementation. It will 
have to happen top-down." 

E nterprise information integration, he 
continued, allows the source data to be 
brought up to a level where a business 
analyst can ask for it in a single defini- 
tion—even though the description and 
content might be different— and rational- 
izing it at a metadata layer. F or instance, 
a user can ask for "customer," even 
though in one system that might mean 
last name-first name, and in another sys- 
tem it might only be a number. 

Lane can see a time when customer 
pull replaces a sales push, as the Internet 
gives customers the ultimate leverage to 
name a price and feature set. And the 
company will be better able to respond 
to a customer's wishes because the com- 
pany will be able to more quickly access 
the data it needs from suppliers, trading 
partners and delivery systems. 

This is what the dot-com bubble gave 
the corporate world— not tissues and nasal 
spray for sale on a Web site. 1 1 showed the 
I nternet is a powerful tool for both buyers 
and sellers, but it also revealed that busi- 
nesses have a long way to go to link up all 
their legacy systems with new Web pres- 
ences to cut costs and optimize the trans- 
actional experience for both sides. I 

David Rubinstein is executive editor of 
SD Times. 
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In a recent Gartner Inc. survey of enterprises' spending on 
strategic emerging technology planning groups, the median 
amount budgeted in 2001 for emerging technology activities was 
0.037 percent of all revenue, and 1.94 percent of total IT spend- 
ing. For this study, emerging technology activities were defined 
as tracking, evaluating and piloting new technologies for IT, but 
excluding R&D for the business's own product development. 

Smaller companies spent a larger percentage of their IT bud- 
get on emerging technology research; businesses with less than 
US$100 million in revenue spent fully 7.5 percent, while corpora- 
tions with more than $5 billion spent only 0.83 percent. 

The majority of companies that characterize themselves as 
early technology adopters have a full-time planning group, but 
most other businesses conduct their technology planning through 
part-time or task-force activities, rather than full-time groups. 
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In a sign of consolidation in the technology research 
and analysis field, Forrester Research Inc. is 
acquiring Giga Information Group Inc. in a deal 
worth approximately US$51 million, the companies 
have announced. Forrester said the move will 
strengthen the company after a round of layoffs last 
summer and declining revenues. The deal is ex- 
pected to bring Forrester about 900 of Giga's cus- 
tomers . . . Investigators from the U.S. Securities 
and Exchange Commission last month issued sub- 
poenas to Computer Associates International Inc. 
regarding the company's accounting practices. CA 
has asked the investigators to work with the com- 
pany, and not its clients, to gather information 
about the accounting procedures, which have been 
under investigation for a year. On a conference call, 
CA chief executive Sanjay Kumar said the company 
is continuing to work with the government. Sepa- 
rately, the company announced it had narrowed its 
net loss to US$44 million at the end of its third quar- 
ter in December from $231 million the previous year. 
Revenue for the quarter was $778 million, a 4 per- 
cent increase over the year-ago quarter but short of 
estimates . . . Online job recruitment service Dice 
Inc. has agreed to a restructuring that will take the 
company through bankruptcy with the goal of being 
debt-free by the middle of this year, the company 
announced. The deal requires Elliott Associates 
LP. and Elliott International L.P., Dice's largest 
debtors, to forgive a note of US$69.4 million through 
a bankruptcy filing that will result in Elliott's owning 
roughly 46 percent of the new, privately held com- 
pany, with the largest current shareholders owning 
the rest. Last month, Dice won an extension from 
the Nasdaq stock market to continue to have its 
stock listed on the exchange despite failing to meet 
minimum stock price and market value require- 
ments. That exception is due to expire March 28. 1 
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What's happening. What it means. 



be liberated 



analyze the problem 



understand the customer needs 



define the requirements 



control the changes 



deliver the right sol vi ion 



start club lor overachicvcts 
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